last executing test programs:

6.284859301s ago: executing program 1 (id=3241):
r0 = socket(0x28, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000})

5.994635355s ago: executing program 1 (id=3243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x11}, 0x24}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', r4, 0x7, 0x80, 0x5, 0x10, {{0x18, 0x4, 0x3, 0x5, 0x60, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0xe, [{@remote, 0x7}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x57, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x8, [{@loopback, 0x9}]}, @generic={0x83, 0x5, "b80437"}, @ssrr={0x89, 0x23, 0xd9, [@multicast2, @multicast2, @loopback, @broadcast, @multicast2, @private=0xa010100, @local, @multicast2]}]}}}}})

5.470194251s ago: executing program 1 (id=3245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "60ec6972"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x2400)

5.289975491s ago: executing program 1 (id=3246):
socket(0x23, 0x800, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000))
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0xff4d)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x998}, 0x10, 0x0, 0xffffffffffffffff, 0x3d}, 0x94)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x0, {0xa, 0x10, 0x0, 0xfe, 0xfe, 0x2, 0xff}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
bind$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0xd)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000009b6656d3adc90ab1e9ffffff00000000000000000000009395e7e8f53c52dd774598cd2a5084"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20000000000000000000000000000000000000000000000ee1e3462e4b922b765a2d50080000000000d0f12bcf71c688d8c5757464b99e47d2b3c655b8e6b34a53491b75647bf334a9b3a939848218d777b6598191a9a72dcba402aa5a893316fb529a6c3c63029b33e94b49ff139387dafb9b8467df6f1a224cbadf72666bbd87ad675a06aeff8b2744d5e2a323b3360b0da02b5c2c343dae195e2c967c731644e0e42482733ecff71dfbb2be27e7726e09c8a6d456a3d574694a27dd792a135499a4e153bc7bfbade7967a70c8df86dd7a573a39d842fec5e164a06955d055a74c117bbfa2fd29791b6281885a282e4171f3a8672175696a910518b365bb3e705375ef8806501f4f4a3bf103de685a9bf7bdf5d884c930a85dfd43b840f195ba04f5fee60cfb36549eae956345935354893118a4ceea2cc46b42bbbb4d2752e62af1eb8176cdeac5101a4bc5ad9246e1660376abd4b6fb445870786b3133f8a3dd06eccc21e0a118169f39fabc42363c"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x2000000000000064, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000840000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a300000189f311d8ae916c67688e298f9000014000000100001"], 0xc8}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480))

4.868541018s ago: executing program 1 (id=3249):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x10) (async)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]})
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f00000002c0)=0x9, 0x4) (async)
setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r7, 0x0, 0x0, 0x4000080, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0)

4.578475406s ago: executing program 1 (id=3252):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) (async)
getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe)
sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010)

3.707739121s ago: executing program 0 (id=3261):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x9, 0xfffffffffffffe00, 0x7ff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x5, 0x5d})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]})
close(r0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x3, <r1=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r1}, 0x4)

1.987642685s ago: executing program 0 (id=3276):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
socket$inet6(0xa, 0x2, 0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010)
recvmsg$unix(r1, 0x0, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wg2\x00'}}, 0x1e)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/90, 0x5a, 0x0, &(0x7f0000000100)=""/8, 0x8}}, 0x10)

1.791776359s ago: executing program 2 (id=3278):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r1, 0x29, 0x4e, &(0x7f0000000040)=0x5, 0x4)

1.753678236s ago: executing program 3 (id=3279):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000fd0000000000000008000b00ff0f00df"], 0x24}}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x30, 0x12, @private0, @private2={0xfc, 0x2, '\x00', 0xff}, 0x1, 0x80, 0xfffffffc, 0x4c51}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})

1.54772619s ago: executing program 0 (id=3280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000a632353146ebdc517c65fd328b0ee9db1efc3f99aaab551fedadb54d75b89014", @ANYRES16=r2, @ANYRES16=r1, @ANYRES64=r0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
write$tun(r2, &(0x7f0000000200)={@void, @val={0x3, 0x4, 0x81, 0x1, 0x9, 0x3}, @x25={0x2, 0x7, 0x1b, "d0f2405e42eefce61863fe6d686f78395bac2817c33864d8f6005ba98fd45f487f1d1f6877033e75a18d7d8e84"}}, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) (async)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f00000000c0)=0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0)

1.544183718s ago: executing program 2 (id=3281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})

1.280753569s ago: executing program 0 (id=3283):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x9}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)

1.277426609s ago: executing program 3 (id=3284):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x89, 0x2, 0x8, 0xed02}, {0x1, 0x7, 0x9, 0x6}]})
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="1fa59be7c96d3b4e9936482b6b57378138250e833c85bd6fcd217332f5f360ea87417aef81c20ed5e9e320c4efcab73705a8ab2b236af55164b0ed697b219a91d4e4eba1e40b39d5976bb9503548e9d27f44057e49219085416b326c12261ea38afc20fa0adc6b3c2043d0c7e99513b0dfdc687224a62d05d81338f687376b168b67866c673cdeb29fe261f37740b590d6e0d0bcf258ee05fe869ba2b99e2f47100aa6c0f7db56197b7cd58f1f23e73facf2b144ec", 0xb5}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xad}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x82, 0x3, "fb"}, @noop, @cipso={0x86, 0x2c, 0x1, [{0x2, 0x10, "d64b25cb656233513678cad6c90d"}, {0x1, 0x11, "e4c1bf1ff89135b9909222a6e011e1"}, {0x0, 0x3, "bc"}, {0x0, 0x2}]}, @lsrr={0x83, 0x13, 0xff, [@multicast2, @loopback, @local, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x0, [{@multicast2}]}]}}}], 0xa8}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.208626582s ago: executing program 4 (id=3285):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x5460, 0x96b5376b91506d81)
openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)

1.103444136s ago: executing program 4 (id=3286):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x1, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0x55a0, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0xd06, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0xbe0, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x408, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0x4b, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffffa, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x5, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x8, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5000000010000d042abd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00c9ed3b84400000f84e072dda032aeb05d36a674dfdbb1c8012806d6163766c616e000c00028008000700486719001441e767f10200d062edf4ab3cb7ca018d4535008a29ee993db2a222a51140ba7292fc243ee8320f357ba255db34de620175cf73cfb22f8fe658924d51325f4654974a8fd1de7cb8050991713f636392ca9e"], 0x50}, 0x1, 0x0, 0x0, 0x2004c890}, 0xc)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

936.051447ms ago: executing program 2 (id=3287):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8ea2945e56c9d0c07b90e0aa06445cf2b74c2278ad7ad8633cd51dd7acf4536bac8c4635ff529b680a56b712e3cb5af7936e279fe07ba2f20334a4fdaec8c909e48d219b0e7e978166e29f691adec0e5526148adbaad390b4bd6b7e1050abf68515280ca2189a069539aacd9840e7c5b133180a836a9c7dc456448eafb217def1d6ca3e62338caebb4ed33a7c9eabec21a6f247d02a244e0cefaaf4386e99396a5afe2c34149995de08a45d3f2177579a01e0a2ea114a7e0e23cc5c260ed375faa4b119b2c8a8942a2f089cf952b6e4b21ba713", 0xe3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4dbc3ae079f5fee8f28051926aae1efd7e0054a863f425cfe6cb54e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f0000000d00)="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", 0x1d5}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x20000801)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

935.363912ms ago: executing program 3 (id=3288):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0)

934.701582ms ago: executing program 4 (id=3289):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096040a000200aaaaaaaaaa0c004f8ece6200010000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) (rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
recvmsg(r5, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x4, 0xb}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

825.878556ms ago: executing program 3 (id=3290):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0)
r0 = socket(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>r0})
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e22, @private=0xa010101}})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
unshare(0x12010400)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2000, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000100)={'veth1_vlan\x00'})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={<r7=>0x0}, &(0x7f0000000240)=0xc)
listen(r1, 0x3)
sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1f4, 0x2a, 0x400, 0x70bd26, 0x25dfdbfe, {0x8}, [@typed={0x8, 0xde, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x21, 0x0, 0x0, @pid=r7}, @generic="cc885b8b8534f61b0f5828c69c9b481679a5f22ef4a4becb72440937c239145e0974d4c0c3c78afeac841332ec41dcdef88b0be4a10d53057a100918767fd57a500c52b9203378ec59b77da7ca5977bc4fc3060a358c962457ae682029f8e297a9b13b4965971734f4946ab1c01d645fa1bfb968460f3e189b2c401f5e2c7bf4a5a3a50da0d4476d3685961a77131b0829450c011dbcdd34173cfeb33fe0b60580c1bc4b78ab0d76d6a96739dc7fc102860145d8a395656c64d130f73b765322c1c10338eb9c42167a0a44beec5efe972a619aef1434eda2a3e539249b59d9239871714e4881cc8016f21c153d8a3a0f1ff6f04956", @generic="99bb8e8ec4d27404fec7b986147d185ec9a1dc329a52", @typed={0x8, 0x14f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xa6, 0x1e, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="bd6c7afe09e64d87667dde570cfa264e8fbb00aeacabfaa47d5861f727763ede8f8ce83e10b63d971a1cf93aceb69ba54950725740f382c607be65568fb88d2724caf356e6901eccbde8a418fc294241cc62e5fb94ef1180b621acffbb92220d0ef13a0d4b08acd9a07965184f90ffa71107d1c0950fe8e9acc79d2b8296f0a020a73fb113750d9207888de32dc3dfe01de6191ee383", @nested={0x4, 0x7d}, @typed={0x4, 0x140}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

796.636079ms ago: executing program 4 (id=3291):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) (async)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={<r2=>0x0, 0x3}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2}, 0x8)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9}, {0xa, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x84, 0x2}], "3c8237558df8d0d5"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8014)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$isdn_base(r0, &(0x7f0000000380)={0x22, 0x3, 0x20, 0xb9, 0xfb}, 0x6) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0), 0x4) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async)
r6 = accept4$x25(r0, &(0x7f0000000440)={0x9, @remote}, &(0x7f0000000480)=0x12, 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) (async)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xaf}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48010) (async)
r10 = socket$phonet(0x23, 0x2, 0x1) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000780)={"f77e21745d06423f1f2e3412176fc21c", 0x0, <r11=>0x0, {0x4, 0x5e99}, {0x3, 0x6}, 0x4, [0x100000000, 0x2, 0x8000, 0x9, 0x9, 0x4, 0x4, 0xd, 0xde8, 0x844c, 0x5, 0x44d3c57b, 0xa, 0x6, 0xb, 0x9]}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @usage, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000c80)={{r10}, r11, 0x0, @unused=[0x5, 0x6, 0xcc4, 0x6], @devid=r12})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001c80))
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r5)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001d00)=0x5, 0x4) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001d40)) (async)
sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r13, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xdf, 0x3d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8004081)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r10, 0x40086e81, &(0x7f0000001e80)=0x6)

687.656959ms ago: executing program 2 (id=3292):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x10, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x7, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6df, 0x3, 0xf, 0x8001, 0x5, 0xeae, 0x8, 0x20, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe0}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x11e, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

686.100653ms ago: executing program 4 (id=3293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)
r2 = socket$kcm(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="08009f000600000008002600b40900"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000800)={0x898, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff7522, 0x44}}}}, [@NL80211_ATTR_TID_CONFIG={0x1c8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdb}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8c23}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x5, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x8001, 0x8, 0x4, 0x8, 0xbe, 0xda]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf001, 0x101, 0x1, 0xc6b6, 0x0, 0x5, 0x8, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x6, 0x2, 0x12, 0x12, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x0, 0x7f, 0x7, 0x0, 0xeaea]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x5, 0x18, 0x6, 0x1, 0x2, 0x48, 0x48, 0xc, 0x4, 0x3, 0x4, 0x36, 0xb, 0x2, 0x1, 0x6c, 0x24, 0x4, 0x9, 0x18, 0x32abd5f695e6ea69]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x5, 0x2, 0xfffb, 0x8, 0xc2c1, 0xfff, 0xfffc]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xae5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x67c, 0x11d, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x101, 0x9, 0x0, 0x5, 0x13, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b98, 0x6, 0x3, 0x8, 0x9f, 0xfff, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x5}, {0x1, 0x3}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x4}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x710b, 0x7, 0x9, 0x17, 0x9, 0xa21, 0x800]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x4, 0x1}, {0x3, 0x6}, {0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x9, 0x0, 0x5, 0x61, 0x30]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x2}, {0x1}, {0x5, 0x9}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x1, 0x200, 0x3, 0x100, 0x4, 0xe9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xb911, 0x908c, 0x0, 0x0, 0xce02, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x200, 0x2515, 0x730b, 0x1ff, 0xc, 0x2d4, 0xce]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1bf, 0x810, 0x8, 0xb, 0xfffe, 0x2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x8}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x7}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x5}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xfffd, 0x6, 0x6, 0x8ae, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x8}, {}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x4}, {0x2, 0x7}, {}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x1}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x5b, 0xc, 0x12, 0x6c, 0x1b, 0x5, 0x5, 0x48, 0xc, 0x36, 0x4c, 0x4, 0x1d, 0xb, 0x30, 0xc, 0x18, 0xc, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39, 0x6, 0x1e52, 0x7, 0x1a2, 0x9, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x6, 0x7f, 0x7, 0x780, 0x6da, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x18, 0x4, 0x3, 0x30, 0x6, 0x5, 0x1, 0x60, 0x1b, 0x60, 0x4, 0x30, 0x16, 0xb, 0x3, 0x3, 0x30, 0x1, 0x6c, 0x6c, 0x30, 0x36, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1e2f, 0x10, 0x96e3, 0x100, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x1, 0x10, 0x3, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x6}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x4}, {0x4, 0x8}, {0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x5}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x4, 0xff, 0x9, 0x9, 0x0, 0x2afb]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x26, 0x18, 0x1, 0xc, 0x36, 0x6c, 0x6c, 0x6c, 0x18, 0x1b, 0x0, 0x28, 0x7a, 0xb, 0x6, 0x1b, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x70, 0x0, 0x8001, 0xb, 0x0, 0x1, 0x1, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x270, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7f, 0x0, 0x4, 0xfc00, 0x5, 0x4, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0xc, 0x6, 0x0, 0xb, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x9}, {0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0xa}, {0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x9}, {0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2826, 0x3, 0x0, 0x8, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf, 0x3ff, 0x7, 0xe0, 0x3, 0xf, 0x2105, 0x2f05]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x52, 0x18, 0x5, 0x16, 0x2, 0x6, 0xb, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x4}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x5}, {0x5, 0xa}, {}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x2}, {0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x5}, {0x3, 0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x3, 0x0, 0x6, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xd139, 0x0, 0x8, 0xc, 0x3, 0x7fff, 0x6]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x3, 0x2, 0x7fff, 0x200, 0x10, 0xf]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5f, 0x18, 0x36, 0x18, 0x13, 0x2, 0x36, 0x9, 0x30, 0x6, 0x6, 0x6, 0x30, 0x36, 0x24, 0x36, 0x1b, 0x22, 0x1, 0xb, 0x24, 0xc, 0x16, 0x2, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x8, 0x401, 0x400, 0x6f, 0xff, 0x6f]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x2}, {0x0, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x1}, {0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0xa}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x0, 0x401, 0x4, 0x2, 0x2, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x4}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x3}, {0x7}, {0x6, 0x1}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x1ff, 0x7, 0x81, 0x7f, 0x2f, 0xd, 0x1000]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6ff, 0x6, 0xc, 0xa, 0x2, 0x400, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x6}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

487.190649ms ago: executing program 3 (id=3294):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x4, 0x28, 0x5, 0x7}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000000200)=""/108, 0x6c, 0xff)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c0002800500080001000000ff94ddc6da4c7252bfba2b551926268bd6ca7ef7874b9bd26feef7e0b13ca3b3f93590027eca75ff9d7ac07911d964185bb9da002974813b6e1397c5a9f5751fe1e381e90f"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8, 0x2b5}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x8002, 0x4cbd, 0x341, <r9=>r8}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={r9, 0x401}, &(0x7f0000000240)=0x8)

355.96065ms ago: executing program 4 (id=3295):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={<r4=>r0, &(0x7f0000000040)=' \x01\x00', 0x200, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0x7]}, {0xe, 0x7, 0x8, 0x10001}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x7})
tee(r3, r4, 0x6, 0x6)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

280.453805ms ago: executing program 2 (id=3296):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$kcm(0x11, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r3=>r2})
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000000c0)={0x400, {{0x2, 0x4e24, @empty}}}, 0x88)
getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0)

277.733959ms ago: executing program 0 (id=3297):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
close(r0)
epoll_create1(0x80000) (async)
write$cgroup_int(r0, 0x0, 0x0)

147.122886ms ago: executing program 3 (id=3298):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001240)={{r0}, "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"})

137.380923ms ago: executing program 0 (id=3299):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @void, @val={0xc, 0x99, {0x7fff, 0x7e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffb, 0xf}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x3, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "5802bf2649a5c243fbb3fece26850a881c51852e4451b57f037ad3c045948124251d7d17b5191584e40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvfrom$l2tp6(r5, 0x0, 0x94, 0x40000002, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000001ac0)=[{{&(0x7f0000000400)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="1585ce4af94a6f2af16b42e25aa83b58fe8daca6eaf90ecf94f911bd2d904febdeed7388e7fd69fd9f595b87317014", 0x2f}, {&(0x7f0000000580)="ebc8bdc3ccbdb0617d496354f0e2e688bf1d570e5080f909c926fae9b68f68e11d40b08d15caa9b9d766b820f375", 0x2e}, {&(0x7f0000000800)="1c07027688de8a7fd21babf8d9bb774bac1b25935fdb65f3", 0x18}], 0x3, &(0x7f0000000880)=[{0x18, 0x84, 0x5, "ab31e2"}, {0x18, 0x0, 0x5, "87e9335b"}, {0x1010, 0x1, 0x3, "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"}, {0x110, 0x94, 0x10000, "4cadb23a83d780f423c1093b1d966b5102b00746247ff3e73c510eb5e66840757b863bfad265d7ab2cd93de9b6142135a5ac79b333a26e2f4ce3ff63aa7bb3c6c0ef93173d042c02638d21e25a1e66e4e0e21d96ac4c0d339fc1fb74c305b433e739c453ffa8cbfa024c1caefbf47913660750a84fcc9376fe37e96b93b1ed21e911003a1c0ae2d723d1df89f8f11082fd476d02b3e3febca4f08ae63a84e10e9eb6c59f65bfddb064097261fd7f65d2c4f340a2ac9eaac770dc22878900c1b366a1becd48918ca77d60c9f9fc3c37978af33456aa5860f5a9ce9c7f5a5448be2e4729e0310729351e68869ecd9bb6955e80093cfd2bdfe2d3"}, {0x50, 0x10f, 0x40, "3e0b71313cce2c27d35074352c7e899d34e6f165f1585e51c33bed8e5bc741882955592fe16616a289064a48ce7c0ffabd95634fa89fc71f350bd2d11d0a"}, {0x38, 0x10b, 0x2, "2f4493f0d74de76297e2e1a3093e52da593e414aa9b7cdcb86cc26921ada27e217cf3f"}, {0x48, 0x102, 0x800, "aa0108a98f4726b669b10062ae02ed0b9cd9a09573f897a86e2d7fa89bdc2dc2444bb85bc432e5c623562a56634a40229536efae70e6"}], 0x1220}}], 0x1, 0x4000800)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in=@private}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000007c0)=0xe8)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0)

0s ago: executing program 2 (id=3300):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

kernel console output (not intermixed with test programs):

[  241.570368][T11656] netlink: 'syz.1.1623': attribute type 16 has an invalid length.
[  241.599903][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1623'.
[  241.727026][T11662] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  241.757274][T11662] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  241.777820][T11669] --map-set only usable from mangle table
[  241.795227][T11670] netlink: 'syz.1.1628': attribute type 1 has an invalid length.
[  241.821057][T11670] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1628'.
[  241.834463][T11670] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1628'.
[  241.845435][T11670] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1628'.
[  241.978857][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'.
[  242.006217][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  242.014457][    C1] lec:lec_tx_timeout: lec0
[  242.019845][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  242.073405][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'.
[  242.201292][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'.
[  242.783884][T11726] vlan3: entered allmulticast mode
[  242.806701][T11726] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  242.965370][T11739] netlink: 'syz.0.1647': attribute type 1 has an invalid length.
[  243.166934][T11757] netlink: 'syz.2.1650': attribute type 2 has an invalid length.
[  243.262492][T11757] �9: entered promiscuous mode
[  243.477119][T11779] netlink: 'syz.4.1658': attribute type 10 has an invalid length.
[  243.520805][T11779] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.576997][T11779] bridge_slave_1: left allmulticast mode
[  243.590202][T11779] bridge_slave_1: left promiscuous mode
[  243.596753][T11779] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.621102][T11779] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  243.857448][T11797] netlink: 'syz.2.1663': attribute type 7 has an invalid length.
[  243.883339][T11798] Unsupported ieee802154 address type: 0
[  243.964557][T11798] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  247.036278][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  247.044316][    C1] lec:lec_tx_timeout: lec0
[  247.048896][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  252.055952][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  252.064028][    C1] lec:lec_tx_timeout: lec0
[  252.068999][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  257.075920][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  257.084037][    C1] lec:lec_tx_timeout: lec0
[  257.088994][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  262.096003][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  262.104089][    C1] lec:lec_tx_timeout: lec0
[  262.109211][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  262.503843][T11811] __nla_validate_parse: 5 callbacks suppressed
[  262.503866][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'.
[  262.520819][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'.
[  262.565177][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'.
[  262.590230][T11819] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  262.609170][T11819] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  262.639159][T11820] syzkaller0: entered allmulticast mode
[  262.809904][T11824] sctp: [Deprecated]: syz.0.1674 (pid 11824) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.809904][T11824] Use struct sctp_sack_info instead
[  262.939629][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  262.971556][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'.
[  263.051267][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'.
[  263.118610][ T9506] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.138374][ T9506] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.159947][ T9506] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.179562][ T9506] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.289274][T11856] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1680'.
[  263.437167][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'.
[  263.522014][T11867] team_slave_1: Caught tx_queue_len zero misconfig
[  263.573868][T11871] syzkaller0: entered promiscuous mode
[  263.594661][T11871] syzkaller0: entered allmulticast mode
[  263.620119][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'.
[  263.644502][T11871] chnl_net:caif_netlink_parms(): no params data found
[  264.059692][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1697'.
[  264.213415][T11912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.240661][T11912] wg0: entered promiscuous mode
[  264.269745][T11912] wg0: entered allmulticast mode
[  264.360471][T11911] tipc: Disabling bearer <eth:syzkaller0>
[  264.479791][T11932] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  264.930214][T11945] bond6: entered promiscuous mode
[  264.944924][T11945] bond6: entered allmulticast mode
[  265.047316][T11970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.054645][T11970] IPv6: NLM_F_CREATE should be set when creating new route
[  265.110194][T11970] lo: entered allmulticast mode
[  265.139545][T11970] tunl0: entered allmulticast mode
[  265.149132][T11970] gre0: entered allmulticast mode
[  265.204902][T11970] gretap0: entered allmulticast mode
[  265.352356][T11970] erspan0: entered allmulticast mode
[  265.374829][T11970] ip_vti0: entered allmulticast mode
[  265.403327][T11970] ip6_vti0: entered allmulticast mode
[  265.438058][T11970] sit0: entered allmulticast mode
[  265.473818][T11970] ip6tnl0: entered allmulticast mode
[  265.525038][T11970] ip6gre0: entered allmulticast mode
[  265.557520][T11970] ip6gretap0: entered allmulticast mode
[  265.581308][T11970] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.589175][T11970] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  265.734106][T11970] vcan0: entered allmulticast mode
[  265.745566][T11970] bond0: entered allmulticast mode
[  265.751402][T11970] bond_slave_0: entered allmulticast mode
[  265.758608][T11970] bond_slave_1: entered allmulticast mode
[  265.792042][T11970] team0: entered allmulticast mode
[  265.814284][T11970] team_slave_0: entered allmulticast mode
[  265.838957][T11970] team_slave_1: entered allmulticast mode
[  265.852836][T11970] þ: entered allmulticast mode
[  265.871347][T11970] nlmon0: entered allmulticast mode
[  266.014440][T12017] netlink: 'syz.4.1723': attribute type 2 has an invalid length.
[  266.033737][T11970] caif0: entered allmulticast mode
[  266.045696][T11970] batadv0: entered allmulticast mode
[  266.089020][T11970] vxcan0: entered allmulticast mode
[  266.118352][T11970] vxcan1: entered allmulticast mode
[  266.144727][T11970] veth0: entered allmulticast mode
[  266.168178][T11970] veth1: entered allmulticast mode
[  266.205270][T11970] wg0: entered allmulticast mode
[  266.273150][T11970] wg1: entered allmulticast mode
[  266.287822][T11970] wg2: entered allmulticast mode
[  266.294468][T11970] veth0_to_bridge: entered allmulticast mode
[  266.313071][T11970] veth1_to_bridge: entered allmulticast mode
[  266.328032][T11970] veth0_to_bond: entered allmulticast mode
[  266.351050][T11970] veth1_to_bond: entered allmulticast mode
[  266.364383][T11970] veth0_to_team: entered allmulticast mode
[  266.437912][T11970] veth1_to_team: entered allmulticast mode
[  266.450355][T11970] veth0_to_batadv: entered allmulticast mode
[  266.459335][T11970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.467681][T11970] batadv_slave_0: entered allmulticast mode
[  266.479412][T11970] veth1_to_batadv: entered allmulticast mode
[  266.495397][T11970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.505341][T11970] batadv_slave_1: entered allmulticast mode
[  266.517104][T11970] xfrm0: entered allmulticast mode
[  266.527056][T11970] veth0_to_hsr: entered allmulticast mode
[  266.536435][T11970] hsr_slave_0: entered allmulticast mode
[  266.581547][T11970] veth1_to_hsr: entered allmulticast mode
[  266.693944][T11970] hsr_slave_1: entered allmulticast mode
[  266.724060][T11970] hsr0: entered allmulticast mode
[  266.738325][T11970] veth1_virt_wifi: entered allmulticast mode
[  266.771866][T11970] veth0_virt_wifi: entered allmulticast mode
[  266.800174][T11970] virt_wifi0: entered allmulticast mode
[  266.816396][T11970] veth1_vlan: entered allmulticast mode
[  266.834189][T11970] veth0_vlan: entered allmulticast mode
[  266.840883][T11970] vlan0: entered allmulticast mode
[  266.847245][T11970] vlan1: entered allmulticast mode
[  266.853552][T11970] macvlan0: entered allmulticast mode
[  266.867107][T11970] macvlan1: entered allmulticast mode
[  266.876813][T11970] ipvlan0: entered allmulticast mode
[  266.883740][T11970] ipvlan1: entered allmulticast mode
[  266.890429][T11970] veth1_macvtap: entered allmulticast mode
[  266.941378][T11970] veth0_macvtap: entered allmulticast mode
[  266.972851][T11970] macvtap0: entered allmulticast mode
[  266.999445][T11970] macsec0: entered allmulticast mode
[  267.014274][T11970] geneve0: entered allmulticast mode
[  267.068041][T11970] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  267.075287][T11970] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  267.084735][T11970] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  267.107777][T11970] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  267.116175][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  267.124254][    C1] lec:lec_tx_timeout: lec0
[  267.128982][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  267.135673][T11970] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  267.149261][T11970] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  267.157114][T11970] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode
[  267.165238][T11970] bridge1: entered allmulticast mode
[  267.175364][T11970] syztnl1: entered allmulticast mode
[  267.181613][T11970] macvlan2: entered allmulticast mode
[  267.188375][T11970] bond1: entered allmulticast mode
[  267.193720][T11970] ip6gre1: entered allmulticast mode
[  267.200203][T11970] sit1: entered allmulticast mode
[  267.236395][T11970] gtp0: entered allmulticast mode
[  267.243742][T11970] bond2: entered allmulticast mode
[  267.250291][T11970] geneve2: entered allmulticast mode
[  267.262200][T11970] gre1: entered allmulticast mode
[  267.285586][T11970] ip6tnl1: entered allmulticast mode
[  267.291968][T11970] bond3: entered allmulticast mode
[  267.300753][T11970] bond4: entered allmulticast mode
[  267.307962][T11970] bond5: entered allmulticast mode
[  267.314239][T11970] veth2: entered allmulticast mode
[  267.325312][T11970] veth3: entered allmulticast mode
[  267.333614][T11970] bond6: left promiscuous mode
[  267.340797][T11970] erspan1: entered allmulticast mode
[  267.347191][T11970] veth4: entered allmulticast mode
[  267.352580][T11970] veth5: entered allmulticast mode
[  267.358795][T11970] mac80211_hwsim hwsim19 wlan3: entered allmulticast mode
[  267.366900][T11970] veth6: entered allmulticast mode
[  267.372586][T11970] veth7: entered allmulticast mode
[  267.378916][T11970] vlan2: left promiscuous mode
[  267.384069][T11970] geneve1: left promiscuous mode
[  267.390384][T11970] bond7: left promiscuous mode
[  267.400056][T11970] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  267.408653][T11970] gtp1: entered allmulticast mode
[  267.418233][T11970] bond8: entered allmulticast mode
[  267.423619][T11970] bond9: entered allmulticast mode
[  267.439316][T11970] : entered allmulticast mode
[  267.624231][T12029] tipc: Enabling of bearer <eth:syzkall¸ôO> rejected, failed to enable media
[  267.674108][T12038] xt_hashlimit: overflow, try lower: 3/0
[  267.681541][ T9508] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.726248][ T9508] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.754197][ T9508] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  267.787365][ T9508] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.829265][ T9508] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.855097][ T9508] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  267.880211][T12048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.897316][ T9508] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.907245][ T9508] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.917468][ T9508] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  267.927391][T12041] syzkaller0: entered promiscuous mode
[  267.933282][T12041] syzkaller0: entered allmulticast mode
[  267.950139][ T9508] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.969039][ T9508] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.990947][ T9508] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  268.014715][T12045] lo: Caught tx_queue_len zero misconfig
[  268.070801][T12041] tipc: Resetting bearer <eth:syzkaller0>
[  268.123227][T12040] tipc: Resetting bearer <eth:syzkaller0>
[  268.184123][T12040] tipc: Disabling bearer <eth:syzkaller0>
[  268.325371][T12067] gre1: entered promiscuous mode
[  268.343753][T12067] gre1: entered allmulticast mode
[  268.439214][T12071] bond0: entered promiscuous mode
[  268.445670][T12071] bond_slave_0: entered promiscuous mode
[  268.463881][T12083] __nla_validate_parse: 8 callbacks suppressed
[  268.463900][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'.
[  268.480560][T12071] bond_slave_1: entered promiscuous mode
[  268.498316][T12071] bridge_slave_1: entered promiscuous mode
[  268.588195][T12083] geneve3: entered promiscuous mode
[  268.602343][T12083] geneve3: entered allmulticast mode
[  268.630058][ T9514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.659965][ T9514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.684653][ T9514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.699146][ T9514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.878119][T12101] netlink: 'syz.1.1746': attribute type 17 has an invalid length.
[  268.889838][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  268.901871][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1746'.
[  269.031206][T12106] »»»»»»: renamed from bond_slave_0 (while UP)
[  269.285580][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1754'.
[  269.295167][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1754'.
[  269.564637][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'.
[  269.727756][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'.
[  269.844241][T12150] netlink: 'syz.3.1760': attribute type 10 has an invalid length.
[  269.910733][T12150] vxcan1: left allmulticast mode
[  269.942892][T12150] vxcan1: entered allmulticast mode
[  269.956384][T12150] team0: Device vxcan1 is of different type
[  270.236891][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'.
[  270.682273][T12186] syzkaller1: entered promiscuous mode
[  270.698764][T12186] syzkaller1: entered allmulticast mode
[  270.983633][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  271.031738][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  271.139038][T12194] lo speed is unknown, defaulting to 1000
[  271.217093][T12201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.872445][T12218] xt_hashlimit: size too large, truncated to 1048576
[  272.146217][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  272.154437][    C1] lec:lec_tx_timeout: lec0
[  272.159606][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  272.241686][T12228] ipt_REJECT: TCP_RESET invalid for non-tcp
[  272.776584][T12247] netlink: 'syz.3.1794': attribute type 30 has an invalid length.
[  272.942972][T12251] syzkaller0: entered promiscuous mode
[  272.956723][T12251] syzkaller0: entered allmulticast mode
[  273.532704][T12295] __nla_validate_parse: 3 callbacks suppressed
[  273.532722][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'.
[  273.610916][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'.
[  273.626020][T12294] bond7: invalid ARP target 0.0.0.0 specified for addition
[  273.633515][T12294] bond7: option arp_ip_target: invalid value (0)
[  273.648425][T12294] bond7 (unregistering): Released all slaves
[  273.666445][T12304] netlink: 'syz.3.1808': attribute type 8 has an invalid length.
[  273.811807][T12308] sctp: [Deprecated]: syz.0.1810 (pid 12308) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.811807][T12308] Use struct sctp_sack_info instead
[  274.072237][T12328] netlink: 'syz.1.1816': attribute type 1 has an invalid length.
[  274.319672][T12328] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  274.368269][T12338] x_tables: duplicate underflow at hook 1
[  274.622040][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'.
[  274.636963][T12355] netlink: 'syz.4.1824': attribute type 9 has an invalid length.
[  274.656482][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'.
[  274.762969][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'.
[  274.788691][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'.
[  274.923376][T12368] sctp: [Deprecated]: syz.3.1829 (pid 12368) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.923376][T12368] Use struct sctp_sack_info instead
[  274.970127][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'.
[  274.999339][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'.
[  275.048714][T12379] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  275.063508][T12379] IPv6: addrconf: prefix option has invalid lifetime
[  275.070365][T12379] IPv6: addrconf: prefix option has invalid lifetime
[  275.090593][T12385] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1834'.
[  275.310571][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1836'.
[  275.895021][T12435] sctp: [Deprecated]: syz.2.1849 (pid 12435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.895021][T12435] Use struct sctp_sack_info instead
[  276.034676][T12440] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  276.827698][T12486] sctp: [Deprecated]: syz.3.1863 (pid 12486) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.827698][T12486] Use struct sctp_sack_info instead
[  277.033271][T12494] ksmbd: Unknown IPC event: 3, ignore.
[  277.474128][T12514] syzkaller1: entered promiscuous mode
[  277.493623][T12514] syzkaller1: entered allmulticast mode
[  277.961345][T12541] sctp: [Deprecated]: syz.3.1878 (pid 12541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.961345][T12541] Use struct sctp_sack_info instead
[  278.205840][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms
[  278.213932][    C1] lec:lec_tx_timeout: lec0
[  278.220496][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  278.284081][T12564] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20257
[  278.291602][ T6168] IPVS: starting estimator thread 0...
[  278.304980][T12564] IPVS: sed: FWM 3 0x00000003 - no destination available
[  278.324314][T12562] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  278.398330][T12565] IPVS: using max 29 ests per chain, 69600 per kthread
[  278.538973][T12576] Bluetooth: MGMT ver 1.23
[  278.599918][T12579] __nla_validate_parse: 10 callbacks suppressed
[  278.599939][T12579] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1890'.
[  278.617661][T12579] netlink: 'syz.3.1890': attribute type 1 has an invalid length.
[  278.901959][T12593] syzkaller1: entered promiscuous mode
[  278.912481][T12593] syzkaller1: entered allmulticast mode
[  278.928299][T12593] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  278.957024][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'.
[  279.129674][T12596] syzkaller1: entered promiscuous mode
[  279.156487][T12596] syzkaller1: entered allmulticast mode
[  279.235609][T12611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1898'.
[  279.318544][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'.
[  279.654355][T12636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1907'.
[  279.684535][T12636] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  279.784385][T12646] netlink: 'syz.4.1910': attribute type 8 has an invalid length.
[  279.793584][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'.
[  279.895647][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'.
[  279.909384][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'.
[  279.937005][T12654] bond8: entered allmulticast mode
[  280.004110][T12654] bridge4: entered promiscuous mode
[  280.024404][T12654] bridge4: entered allmulticast mode
[  280.058004][T12654] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  280.100833][T12658] macsec0: left allmulticast mode
[  280.493786][T12687] netlink: 'syz.2.1917': attribute type 2 has an invalid length.
[  280.516578][T12689] xt_CT: You must specify a L4 protocol and not use inversions on it
[  280.572143][T12693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'.
[  280.576104][T12687] �9: entered promiscuous mode
[  280.625389][T12689] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  280.926268][T12712] x_tables: duplicate underflow at hook 3
[  280.990619][T12712] ip6gre2: entered allmulticast mode
[  281.034469][T12714] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  281.176031][   T29] audit: type=1107 audit(1776296969.744:4): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹'
[  281.439423][T12747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'.
[  281.669718][T12754] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  281.724208][T12754] bond10 (unregistering): Released all slaves
[  281.765442][T12767] bond0: entered promiscuous mode
[  281.771670][T12767] »»»»»»: entered promiscuous mode
[  281.777288][T12767] bond_slave_1: entered promiscuous mode
[  281.784684][T12767] bond0: left promiscuous mode
[  281.790406][T12767] »»»»»»: left promiscuous mode
[  281.795559][T12767] bond_slave_1: left promiscuous mode
[  281.962593][T12774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.305120][T12785] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.322942][T12785] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  282.408330][T12785] netdevsim netdevsim0 veth1_macvtap: renamed from netdevsim0
[  282.892644][T12804] bond10: option min_links: invalid value (18446744073709551614)
[  282.947228][T12804] bond10: option min_links: allowed values 0 - 2147483647
[  283.045410][T12804] bond10 (unregistering): Released all slaves
[  283.212199][T12808] tipc: Enabled bearer <eth:caif0>, priority 10
[  283.413926][T12836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.430968][T12827] xt_CT: No such helper "pptp"
[  283.452004][T12836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.464053][T12836] bond0 (unregistering): Released all slaves
[  283.711074][T12850] __nla_validate_parse: 7 callbacks suppressed
[  283.711111][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  283.759244][T12850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1967'.
[  283.803344][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'.
[  283.823359][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'.
[  283.848399][ T5489] 8021q: adding VLAN 0 to HW filter on device veth1_macvtap
[  283.965835][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  283.973982][    C1] lec:lec_tx_timeout: lec0
[  283.979260][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  284.210242][T12865] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  284.243962][T12876] netlink: 'syz.3.1975': attribute type 1 has an invalid length.
[  284.255234][T12865] ip6erspan0: left promiscuous mode
[  284.266565][T12865] sit1: left promiscuous mode
[  284.271365][T12865] sit1: left allmulticast mode
[  284.279878][T12865] gre1: left promiscuous mode
[  284.284650][T12865] gre1: left allmulticast mode
[  284.314603][T12865] bond4: left promiscuous mode
[  284.347756][T12865] bond6: left promiscuous mode
[  284.352683][T12865] bond6: left allmulticast mode
[  284.372877][ T6168] lo speed is unknown, defaulting to 1000
[  284.390050][ T6168] syz2: Port: 1 Link DOWN
[  284.501237][T12873] veth0: entered allmulticast mode
[  284.524501][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  284.535481][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  284.545050][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  284.568868][ T9508] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.580676][ T9508] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.592023][ T6201] tipc: Node number set to 414338310
[  284.601979][ T1211] lo speed is unknown, defaulting to 1000
[  284.622187][ T9508] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.632191][ T9508] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.664821][ T9508] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.708844][ T9508] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.728478][ T9508] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.748694][T12885] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  284.752610][ T9508] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.800999][T12889] syzkaller0: entered promiscuous mode
[  284.820776][T12889] syzkaller0: entered allmulticast mode
[  284.855765][T12883] tc action pedit 'at' offset -255 out of bounds
[  284.939106][T12894] netlink: 'syz.4.1981': attribute type 1 has an invalid length.
[  285.045765][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1985'.
[  285.359576][T12916] netlink: 'syz.0.1990': attribute type 1 has an invalid length.
[  285.614177][T12927] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  285.630718][T12927] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  285.655336][T12927] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1993'.
[  285.768609][T12943] IPVS: ovf: UDP 224.0.0.1:0 - no destination available
[  285.778221][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'.
[  285.835499][T12946] netlink: 'syz.0.2001': attribute type 39 has an invalid length.
[  286.191915][T12968] Cannot find del_set index 0 as target
[  286.359994][T12977] gre1: entered promiscuous mode
[  286.513473][T12988] xt_hashlimit: overflow, rate too high: 0
[  286.845061][T13006] netlink: 'syz.0.2020': attribute type 2 has an invalid length.
[  287.173529][T13018] netlink: 'syz.3.2024': attribute type 9 has an invalid length.
[  288.888712][T13011] netlink: 'syz.2.2021': attribute type 12 has an invalid length.
[  288.995873][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  289.004043][    C1] lec:lec_tx_timeout: lec0
[  289.009664][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  289.100709][T13029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.124441][T13029] netlink: 'syz.4.2026': attribute type 1 has an invalid length.
[  289.136225][T13027] netlink: 'syz.0.2027': attribute type 1 has an invalid length.
[  289.282349][T13035] __nla_validate_parse: 2 callbacks suppressed
[  289.282371][T13035] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2028'.
[  289.389712][T13041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.543995][T13058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2035'.
[  289.576422][T13058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2035'.
[  289.600393][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'.
[  289.784910][T13065] x_tables: duplicate underflow at hook 2
[  289.948568][T13075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2039'.
[  289.974782][T13076] lo speed is unknown, defaulting to 1000
[  290.064582][T13079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  294.016182][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  294.024347][    C1] lec:lec_tx_timeout: lec0
[  294.029207][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  299.036293][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  299.044370][    C1] lec:lec_tx_timeout: lec0
[  299.048996][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  304.055866][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  304.063940][    C1] lec:lec_tx_timeout: lec0
[  304.068759][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  307.214881][T13106] netlink: 'syz.3.2046': attribute type 1 has an invalid length.
[  307.255996][T13106] netlink: 'syz.3.2046': attribute type 2 has an invalid length.
[  307.284769][T13106] netlink: 'syz.3.2046': attribute type 1 has an invalid length.
[  307.309028][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2046'.
[  307.348269][T13110] netlink: 'syz.4.2049': attribute type 10 has an invalid length.
[  307.369920][T13110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2049'.
[  307.398989][T13110] H: entered promiscuous mode
[  307.415583][T13110] bridge0: port 1(H) entered blocking state
[  307.431835][T13110] bridge0: port 1(H) entered disabled state
[  307.439340][T13110] H: entered allmulticast mode
[  307.521356][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  307.527656][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'.
[  307.542976][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'.
[  307.555138][T13112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2050'.
[  307.564828][T13112] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2050'.
[  307.632559][T13112] veth5: entered promiscuous mode
[  307.752658][T13130] netlink: 'syz.4.2053': attribute type 1 has an invalid length.
[  307.802192][T13130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2053'.
[  308.877772][T13186] bridge5: entered promiscuous mode
[  308.899624][T13186] bridge5: entered allmulticast mode
[  308.944643][T13186] team0: Port device bridge5 added
[  309.076158][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  309.084238][    C1] lec:lec_tx_timeout: lec0
[  309.091113][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  309.199619][T13205] openvswitch: netlink: Flow key attr not present in new flow.
[  309.415327][T13214] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  309.432936][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'.
[  309.444479][T13220] IPv6: NLM_F_CREATE should be specified when creating new route
[  309.524006][T13214] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  309.580111][T13227] sctp: [Deprecated]: syz.3.2079 (pid 13227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  309.580111][T13227] Use struct sctp_sack_info instead
[  309.893936][T13241] syzkaller0: entered promiscuous mode
[  309.902947][T13241] syzkaller0: entered allmulticast mode
[  309.937385][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  310.402459][T13275] veth1_to_bond: entered allmulticast mode
[  310.632262][T13282] veth1_to_bond: left allmulticast mode
[  310.817691][T13300] ip6tnl0: Caught tx_queue_len zero misconfig
[  310.852203][T13300] sch_fq: defrate 0 ignored.
[  311.098248][T13302] bond10: entered promiscuous mode
[  311.145223][T13302] bond10: entered allmulticast mode
[  311.303809][T13306] sctp: [Deprecated]: syz.0.2097 (pid 13306) Use of int in max_burst socket option.
[  311.303809][T13306] Use struct sctp_assoc_value instead
[  311.952868][T13367] netlink: 'syz.4.2111': attribute type 3 has an invalid length.
[  312.135347][T13373] netlink: 'syz.0.2113': attribute type 6 has an invalid length.
[  312.150671][T13375] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.175507][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.203502][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.227545][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.248513][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.266409][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.282929][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.310209][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.336489][T13387] bond1: (slave lo): Releasing backup interface
[  312.352864][T13387] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  312.404032][T13387] H: left allmulticast mode
[  312.420566][T13387] bridge0: port 1(H) entered disabled state
[  312.455131][T13387] bond0: (slave bridge_slave_1): Releasing backup interface
[  312.464129][T13387] bridge_slave_1: left promiscuous mode
[  312.475630][T13387] bond0: (slave »»»»»»): Releasing backup interface
[  312.486703][T13387] »»»»»»: left promiscuous mode
[  312.501336][T13387] bond0: (slave bond_slave_1): Releasing backup interface
[  312.525029][T13387] bond_slave_1: left promiscuous mode
[  312.555517][T13387] team0: Port device team_slave_0 removed
[  312.565004][T13387] team0: Port device team_slave_1 removed
[  312.576738][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.584486][T13387] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.597007][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.604955][T13387] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.618096][T13387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  312.643302][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.674435][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.687279][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.714754][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.723192][T13381] netlink: 'syz.3.2115': attribute type 4 has an invalid length.
[  312.856401][T13405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.270191][T13434] __nla_validate_parse: 2 callbacks suppressed
[  313.270211][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'.
[  313.472458][T13444] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2134'.
[  313.634496][T13447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2135'.
[  313.659758][T13447] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2135'.
[  313.724846][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2135'.
[  313.773790][T13459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2137'.
[  314.119359][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  314.127515][    C1] lec:lec_tx_timeout: lec0
[  314.132779][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  314.230751][T13477] blkio.reset_stats is deprecated
[  314.689011][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'.
[  314.817476][T13495] lo speed is unknown, defaulting to 1000
[  314.829811][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'.
[  315.143378][T13519] xt_limit: Overflow, try lower: 271964/0
[  315.272219][T13527] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2159'.
[  315.859745][T13550] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2167'.
[  316.354617][T13565] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  316.386300][T13566] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  316.713093][T13584] bond0: Error: Cannot enslave bond to itself.
[  316.950969][T13599] sctp: [Deprecated]: syz.0.2183 (pid 13599) Use of int in max_burst socket option.
[  316.950969][T13599] Use struct sctp_assoc_value instead
[  317.134135][T13606] bond0: entered promiscuous mode
[  317.140030][T13606] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.156276][T13609] bond0: entered promiscuous mode
[  317.161776][T13609] »»»»»»: entered promiscuous mode
[  317.168287][T13609] bond_slave_1: entered promiscuous mode
[  317.175598][T13609] batadv0: entered promiscuous mode
[  317.181934][T13609] debugfs: 'hsr1' already exists in 'hsr'
[  317.188396][T13609] Cannot create hsr debugfs directory
[  317.194562][T13609] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  317.206599][T13609] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  317.218568][T13609] 8021q: adding VLAN 0 to HW filter on device hsr1
[  317.229547][T13609] bond0: left promiscuous mode
[  317.234477][T13609] »»»»»»: left promiscuous mode
[  317.239897][T13609] bond_slave_1: left promiscuous mode
[  317.251361][T13609] batadv0: left promiscuous mode
[  317.277342][T13606] macvlan3: entered promiscuous mode
[  317.283743][T13606] macvlan3: entered allmulticast mode
[  317.292188][T13606] bond0: (slave macvlan3): Opening slave failed
[  317.418806][T13614] tc_dump_action: action bad kind
[  317.482520][T13618] validate_nla: 59 callbacks suppressed
[  317.482543][T13618] netlink: 'syz.3.2189': attribute type 3 has an invalid length.
[  317.509904][T13620] netlink: 'syz.3.2189': attribute type 3 has an invalid length.
[  317.612318][T13622] syzkaller1: entered promiscuous mode
[  317.623246][T13622] syzkaller1: entered allmulticast mode
[  318.431993][T13638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.441323][T13648] erspan0: entered promiscuous mode
[  318.454934][T13648] erspan0: left allmulticast mode
[  318.472490][T13648] __nla_validate_parse: 10 callbacks suppressed
[  318.472514][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'.
[  318.534844][T13650] netlink: 'syz.4.2198': attribute type 1 has an invalid length.
[  318.545114][T13647] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.814556][T13635] tipc: Disabling bearer <eth:syzkaller0>
[  318.891838][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'.
[  318.930941][T13669] netlink: 'syz.2.2200': attribute type 7 has an invalid length.
[  318.953448][T13669] netlink: 'syz.2.2200': attribute type 8 has an invalid length.
[  318.988528][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'.
[  319.145854][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  319.154310][    C1] lec:lec_tx_timeout: lec0
[  319.159269][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  319.204401][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2205'.
[  319.721938][T13704] netlink: 'syz.2.2207': attribute type 1 has an invalid length.
[  320.387798][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2212'.
[  320.450505][T13726] netlink: 'syz.3.2213': attribute type 25 has an invalid length.
[  320.466079][T13726] netlink: 'syz.3.2213': attribute type 28 has an invalid length.
[  320.931039][T13750] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2220'.
[  320.963451][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  321.022099][T13742] lo speed is unknown, defaulting to 1000
[  321.039660][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'.
[  321.181655][T13758] x_tables: duplicate underflow at hook 1
[  321.189673][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  321.455720][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'.
[  321.492261][T13767] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  321.623721][T13767] team1: entered promiscuous mode
[  321.631570][T13767] team1: entered allmulticast mode
[  321.774221][T13777] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  321.812508][T13777] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  321.842613][T13779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.885094][T13779] netlink: 'syz.1.2230': attribute type 39 has an invalid length.
[  322.493628][T13809] netlink: 'syz.0.2236': attribute type 1 has an invalid length.
[  322.731104][T13809] bond11: entered promiscuous mode
[  322.774556][T13809] 8021q: adding VLAN 0 to HW filter on device bond11
[  322.847582][T13814] 8021q: adding VLAN 0 to HW filter on device bond11
[  322.860542][T13825] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  322.867324][T13814] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  322.878692][T13814] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  322.892722][T13814] bond11: (slave ip6gre2): making interface the new active one
[  322.900796][T13814] ip6gre2: entered promiscuous mode
[  322.910201][T13814] bond11: (slave ip6gre2): Enslaving as an active interface with an up link
[  323.050719][T13829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.478311][T13849] __nla_validate_parse: 2 callbacks suppressed
[  323.478333][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'.
[  323.669411][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[  323.852572][T13851] delete_channel: no stack
[  324.264447][T13891] netlink: 'syz.3.2261': attribute type 2 has an invalid length.
[  324.283570][T13891] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2261'.
[  324.311821][T13891] netlink: 'syz.3.2261': attribute type 13 has an invalid length.
[  324.380266][T13891] gretap0: refused to change device tx_queue_len
[  324.415953][T13891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  324.470529][T13904] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.2266'.
[  324.529520][T13906] xt_nfacct: accounting object `syz1' does not exist
[  324.753067][T13921] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  324.811356][T13926] netlink: 'syz.0.2273': attribute type 1 has an invalid length.
[  324.922224][T13926] 8021q: adding VLAN 0 to HW filter on device bond12
[  324.935822][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  324.944074][    C1] lec:lec_tx_timeout: lec0
[  324.950163][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  324.974702][T13926] bond12: (slave batadv2): Opening slave failed
[  325.097080][T13930] bond12: (slave veth7): Enslaving as an active interface with a down link
[  325.396407][T13955] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  325.481415][T13958] bond9 (unregistering): Released all slaves
[  325.745644][T13963] syzkaller0: entered promiscuous mode
[  325.767408][T13963] syzkaller0: entered allmulticast mode
[  326.081206][T13988] vlan1: entered promiscuous mode
[  326.093648][T13988] vlan1: entered allmulticast mode
[  326.100425][T13988] veth0_vlan: entered allmulticast mode
[  326.364278][T14010] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2296'.
[  326.529939][T14008] netlink: 'syz.1.2294': attribute type 12 has an invalid length.
[  326.580693][T14008] netlink: 'syz.1.2294': attribute type 29 has an invalid length.
[  326.608380][T14008] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2294'.
[  326.644178][T14008] netlink: 'syz.1.2294': attribute type 1 has an invalid length.
[  326.664745][T14008] netlink: 'syz.1.2294': attribute type 2 has an invalid length.
[  326.922944][T14033] openvswitch: netlink: nsh attr 13535 is out of range max 3
[  327.119702][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2308'.
[  327.391994][T14057] netlink: 'syz.1.2313': attribute type 4 has an invalid length.
[  327.569801][T14064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2315'.
[  327.579341][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  327.734683][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2318'.
[  327.752655][T14075] xfrm1: entered promiscuous mode
[  327.758140][T14075] xfrm1: entered allmulticast mode
[  328.334610][T14089] netlink: 'syz.3.2321': attribute type 5 has an invalid length.
[  328.491675][T14103] netlink: 'syz.4.2324': attribute type 1 has an invalid length.
[  328.556554][T14103] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  328.625600][T14113] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  329.030252][T14136] syzkaller0: entered allmulticast mode
[  329.134054][T14132] syzkaller0 (unregistering): left allmulticast mode
[  329.233023][T14151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  329.692794][T14171] __nla_validate_parse: 2 callbacks suppressed
[  329.692825][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'.
[  329.940011][T14194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.965834][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  329.973955][    C1] lec:lec_tx_timeout: lec0
[  329.979537][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  330.211913][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2347'.
[  330.246872][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'.
[  330.332491][T14213] syzkaller0: entered promiscuous mode
[  330.344772][T14213] syzkaller0: entered allmulticast mode
[  330.544534][T14219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.587328][T14218] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  330.907480][T14235] : entered promiscuous mode
[  330.999475][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'.
[  331.127895][T14244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'.
[  331.137430][T14244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'.
[  331.391408][T14261] bpq0: left promiscuous mode
[  331.412505][T14261] bpq0: left allmulticast mode
[  331.649127][T14272] netlink: 'syz.2.2370': attribute type 16 has an invalid length.
[  331.688727][T14272] netlink: 'syz.2.2370': attribute type 17 has an invalid length.
[  331.721373][T14273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  331.766703][T14273] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  331.771269][T14279] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2372'.
[  331.806032][T14273] gretap2: entered promiscuous mode
[  331.815946][T14273] gretap2: entered allmulticast mode
[  331.952258][T14272] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.968088][T14272] 8021q: adding VLAN 0 to HW filter on device team0
[  331.990273][T14272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.039755][ T6201] lo speed is unknown, defaulting to 1000
[  332.049966][ T6201] syz2: Port: 1 Link ACTIVE
[  332.088164][ T6201] lo speed is unknown, defaulting to 1000
[  332.249683][T14295] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  332.311828][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  332.339876][T14300] netlink: 'syz.1.2375': attribute type 1 has an invalid length.
[  332.368914][T14300] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2375'.
[  332.724044][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'.
[  334.242660][T14404] xt_hashlimit: size too large, truncated to 1048576
[  334.544432][T14414] netlink: 'syz.1.2407': attribute type 10 has an invalid length.
[  334.725398][T14420] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  334.785229][T14421] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  334.854241][T14420] team0: No ports can be present during mode change
[  334.870906][T14427] team0: No ports can be present during mode change
[  334.941602][T14436] __nla_validate_parse: 4 callbacks suppressed
[  334.941624][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2414'.
[  334.986129][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  334.994742][    C1] lec:lec_tx_timeout: lec0
[  334.999489][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  335.217872][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2417'.
[  335.662961][T14458] netlink: 'syz.0.2419': attribute type 2 has an invalid length.
[  338.520076][T14480] lo speed is unknown, defaulting to 1000
[  338.804986][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  338.817871][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  339.160372][T14523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2438'.
[  339.181437][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'.
[  339.504806][T14541] Bluetooth: MGMT ver 1.23
[  340.015815][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  340.024006][    C1] lec:lec_tx_timeout: lec0
[  340.030517][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  340.204880][T14565] wireguard0: entered promiscuous mode
[  340.215653][T14565] wireguard0: entered allmulticast mode
[  340.499703][T14590] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  340.531315][T14590] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  340.795714][T14608] openvswitch: netlink: Message has 592 unknown bytes.
[  340.803291][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.814137][T14606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2463'.
[  340.856400][T14606] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2463'.
[  340.908129][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2466'.
[  341.070675][T14621] netlink: 'syz.4.2469': attribute type 4 has an invalid length.
[  341.089253][T14625] netlink: 'syz.4.2469': attribute type 4 has an invalid length.
[  341.601375][T14656] Bluetooth: hci0: Opcode 0x080f failed: -22
[  341.675280][T14660] x_tables: duplicate underflow at hook 1
[  341.770932][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'.
[  341.913870][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'.
[  341.978350][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2480'.
[  342.074900][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'.
[  342.298017][T14645] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2475'.
[  342.333877][T14645] netlink: 'syz.4.2475': attribute type 2 has an invalid length.
[  342.359174][T14645] netlink: 'syz.4.2475': attribute type 1 has an invalid length.
[  342.380310][T14684] openvswitch: netlink: IP tunnel dst address not specified
[  342.758580][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.807317][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.839109][T14709] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2493'.
[  342.850582][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.865709][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'.
[  342.906394][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.937668][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.992046][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.025438][T14707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.068215][T14715] netlink: 'syz.4.2495': attribute type 6 has an invalid length.
[  343.274647][T14721] netlink: 'syz.4.2499': attribute type 1 has an invalid length.
[  343.322225][T14721] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  344.666885][T14803] netlink: 'syz.3.2525': attribute type 5 has an invalid length.
[  344.694202][T14803] geneve4: entered promiscuous mode
[  344.699959][T14803] geneve4: entered allmulticast mode
[  344.708951][ T9509] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  344.726799][ T9509] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  344.751111][ T9509] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  344.777450][ T9509] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  344.946915][T14818] netlink: 'syz.3.2530': attribute type 10 has an invalid length.
[  344.955351][T14818] veth0_vlan: left promiscuous mode
[  344.963939][T14818] veth0_vlan: entered promiscuous mode
[  344.972515][T14818] team0: Device veth0_vlan failed to register rx_handler
[  345.045982][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  345.054270][    C1] lec:lec_tx_timeout: lec0
[  345.059537][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  345.387975][T14843] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  345.482303][T14848] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  345.613979][T14848] 8021q: adding VLAN 0 to HW filter on device bond13
[  345.636231][T14859] bond13: (slave geneve3): making interface the new active one
[  345.648643][T14859] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  345.665378][ T9508] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  345.692995][ T9508] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  345.702607][ T9508] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  345.853970][T14861] __nla_validate_parse: 13 callbacks suppressed
[  345.853992][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'.
[  345.895236][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2547'.
[  346.272133][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2554'.
[  346.380071][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2556'.
[  346.490903][T14899] net_ratelimit: 58 callbacks suppressed
[  346.490926][T14899] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  346.573443][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'.
[  347.283003][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'.
[  347.370050][T14929] syzkaller1: entered promiscuous mode
[  347.376744][T14929] syzkaller1: entered allmulticast mode
[  347.411729][T14934] netlink: 'syz.1.2569': attribute type 11 has an invalid length.
[  347.429755][T14934] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2569'.
[  348.004296][T14966] netlink: 'syz.1.2579': attribute type 21 has an invalid length.
[  348.094862][T14966] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  348.116868][T14966] bond5 (unregistering): Released all slaves
[  348.439039][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2586'.
[  348.589907][T15001] sctp: [Deprecated]: syz.4.2589 (pid 15001) Use of int in max_burst socket option.
[  348.589907][T15001] Use struct sctp_assoc_value instead
[  348.597803][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'.
[  348.656081][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2590'.
[  349.341290][ T5891] IPVS: starting estimator thread 0...
[  349.435932][T15038] IPVS: using max 28 ests per chain, 67200 per kthread
[  349.465135][T15049] netlink: 'syz.0.2606': attribute type 3 has an invalid length.
[  349.544072][T15053] veth1_macvtap: left promiscuous mode
[  349.645234][T15059] netlink: 'syz.1.2610': attribute type 1 has an invalid length.
[  349.717236][T15065] openvswitch: netlink: Message has 592 unknown bytes.
[  349.732129][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.911506][T15064] bond5 (unregistering): Released all slaves
[  350.066023][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  350.074244][    C1] lec:lec_tx_timeout: lec0
[  350.079371][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  350.244561][T15069] bond5: (slave gretap3): making interface the new active one
[  350.253116][T15069] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  350.281334][T15074] 8021q: adding VLAN 0 to HW filter on device bond5
[  350.321597][T15083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.929895][T15129] __nla_validate_parse: 5 callbacks suppressed
[  350.929919][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2626'.
[  351.261573][T15142] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  351.314373][T15142] bond9 (unregistering): Released all slaves
[  351.679842][T15156] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2634'.
[  351.811075][T15166] netlink: 'syz.0.2638': attribute type 1 has an invalid length.
[  351.832736][T15167] netlink: 'syz.0.2638': attribute type 1 has an invalid length.
[  351.859509][T15166] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.2638'.
[  351.876851][T15167] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.2638'.
[  351.888428][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2638'.
[  351.952737][T15172] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2640'.
[  351.990785][T15172] xt_TCPMSS: Only works on TCP SYN packets
[  352.228376][T15186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2646'.
[  352.254976][T15186] netlink: 'syz.4.2646': attribute type 7 has an invalid length.
[  352.274073][T15186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2646'.
[  352.304758][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2646'.
[  352.343485][T15192] netlink: 'syz.4.2646': attribute type 7 has an invalid length.
[  352.360871][T15188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  352.385179][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2646'.
[  353.088886][T15195] gre0: entered promiscuous mode
[  353.096188][T15195] gre0: entered allmulticast mode
[  353.317944][T15222] syzkaller0: entered promiscuous mode
[  353.344003][T15222] syzkaller0: entered allmulticast mode
[  353.438781][T15231] sctp: [Deprecated]: syz.1.2657 (pid 15231) Use of int in maxseg socket option.
[  353.438781][T15231] Use struct sctp_assoc_value instead
[  353.879030][T15243] netlink: 'syz.4.2661': attribute type 30 has an invalid length.
[  354.000856][T15249] netlink: 'syz.0.2662': attribute type 21 has an invalid length.
[  354.037896][T15249] IPv6: NLM_F_CREATE should be specified when creating new route
[  354.076165][T15249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.083687][T15249] IPv6: NLM_F_CREATE should be set when creating new route
[  354.091053][T15249] IPv6: NLM_F_CREATE should be set when creating new route
[  354.098465][T15249] IPv6: NLM_F_CREATE should be set when creating new route
[  354.147729][T15267] netlink: 'syz.1.2667': attribute type 3 has an invalid length.
[  354.403099][T15278] C: entered allmulticast mode
[  354.410461][T15278] tunl0: entered allmulticast mode
[  354.418895][T15278] gre0: entered allmulticast mode
[  354.435131][T15278] gretap0: entered allmulticast mode
[  354.454972][T15278] erspan0: entered allmulticast mode
[  354.480742][T15278] ip_vti0: entered allmulticast mode
[  354.491143][T15278] ip6_vti0: left promiscuous mode
[  354.498263][T15278] ip6_vti0: entered allmulticast mode
[  354.504156][T15278] sit0: entered allmulticast mode
[  354.524733][T15278] ip6tnl0: entered allmulticast mode
[  354.540584][T15278] ip6gre0: entered allmulticast mode
[  354.553390][T15278] syz_tun: entered allmulticast mode
[  354.587409][T15278] ip6gretap0: entered allmulticast mode
[  354.599206][T15278] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.607023][T15278] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.615752][T15278] bridge0: entered allmulticast mode
[  354.630200][T15278] bond0: entered allmulticast mode
[  354.645641][T15278] bond_slave_0: entered allmulticast mode
[  354.655044][T15278] bond_slave_1: entered allmulticast mode
[  354.679859][T15278] team0: entered allmulticast mode
[  354.687473][T15278] team_slave_0: entered allmulticast mode
[  354.693448][T15278] team_slave_1: entered allmulticast mode
[  354.700290][T15278] gretap2: entered allmulticast mode
[  354.725483][T15278] dummy0: entered allmulticast mode
[  354.738240][T15278] nlmon0: entered allmulticast mode
[  354.746564][T15278] caif0: entered allmulticast mode
[  354.752306][T15278] vxcan0: entered allmulticast mode
[  354.760403][T15278] vxcan1: entered allmulticast mode
[  354.770345][T15278] veth0: entered allmulticast mode
[  354.783882][T15278] veth1: entered allmulticast mode
[  354.801334][T15278] wg1: entered allmulticast mode
[  354.842472][T15278] wg2: entered allmulticast mode
[  354.853659][T15278] veth0_to_bridge: entered allmulticast mode
[  354.866756][T15278] veth1_to_bridge: entered allmulticast mode
[  354.878101][T15278] veth0_to_bond: entered allmulticast mode
[  354.888357][T15278] veth1_to_bond: entered allmulticast mode
[  354.900976][T15278] veth0_to_team: entered allmulticast mode
[  354.912587][T15278] veth1_to_team: entered allmulticast mode
[  354.923663][T15278] veth0_to_batadv: entered allmulticast mode
[  354.935014][T15278] batadv_slave_0: entered allmulticast mode
[  354.944285][T15278] veth1_to_batadv: entered allmulticast mode
[  354.955501][T15278] batadv_slave_1: entered allmulticast mode
[  354.967803][T15278] xfrm0: entered allmulticast mode
[  354.976656][T15278] veth0_to_hsr: entered allmulticast mode
[  354.985498][T15278] hsr_slave_0: entered allmulticast mode
[  354.994738][T15278] veth1_to_hsr: entered allmulticast mode
[  355.005703][T15278] hsr_slave_1: entered allmulticast mode
[  355.014435][T15278] hsr0: entered allmulticast mode
[  355.023023][T15278] veth1_virt_wifi: entered allmulticast mode
[  355.032282][T15278] veth0_virt_wifi: entered allmulticast mode
[  355.041412][T15278] virt_wifi0: entered allmulticast mode
[  355.059037][T15278] vlan0: entered allmulticast mode
[  355.064496][T15278] vlan1: left promiscuous mode
[  355.071758][T15278] macvlan0: left promiscuous mode
[  355.079847][T15278] macvlan0: entered allmulticast mode
[  355.085997][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  355.094096][    C1] lec:lec_tx_timeout: lec0
[  355.098992][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  355.108778][T15278] macvlan1: entered allmulticast mode
[  355.117079][T15278] ipvlan0: entered allmulticast mode
[  355.122582][T15278] ipvlan1: entered allmulticast mode
[  355.128578][T15278] veth1_macvtap: entered allmulticast mode
[  355.137620][T15278] veth0_macvtap: entered allmulticast mode
[  355.148200][T15278] macvtap0: entered allmulticast mode
[  355.157795][T15278] macsec0: entered allmulticast mode
[  355.168639][T15278] geneve0: entered allmulticast mode
[  355.178464][T15278] geneve1: entered allmulticast mode
[  355.189333][T15278] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  355.203787][T15278] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  355.217742][T15278] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  355.230321][T15278] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  355.239809][T15278] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  355.247639][T15278] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  355.255237][T15278] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  355.264261][T15278] team1: left promiscuous mode
[  355.270113][T15278] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  355.278579][T15278] bond1: entered allmulticast mode
[  355.283843][T15278] bridge1: entered allmulticast mode
[  355.293538][T15278] veth2: entered allmulticast mode
[  355.299265][T15278] veth3: entered allmulticast mode
[  355.304617][T15278] syztnl2: entered allmulticast mode
[  355.311064][T15278] hsr1: entered allmulticast mode
[  355.318585][T15278] vti0: entered allmulticast mode
[  355.325049][T15278] sit1: entered allmulticast mode
[  355.331009][T15278] bond2: entered allmulticast mode
[  355.336631][T15278] gretap1: entered allmulticast mode
[  355.344462][T15278] @: entered allmulticast mode
[  355.352304][T15278] gtp0: left promiscuous mode
[  355.359471][T15278] vxlan0: entered allmulticast mode
[  355.367276][T15278] bridge2: entered allmulticast mode
[  355.372866][T15278] ip6erspan0: entered allmulticast mode
[  355.379208][T15278] mac80211_hwsim hwsim18 wlan3: entered allmulticast mode
[  355.387562][T15278] bond3: entered allmulticast mode
[  355.393798][T15278] macvlan2: left promiscuous mode
[  355.399774][T15278] h: left promiscuous mode
[  355.404248][T15278] h: entered allmulticast mode
[  355.410660][T15278] macvtap1: left promiscuous mode
[  355.418130][T15278] vti1: entered allmulticast mode
[  355.423429][T15278] veth4: entered allmulticast mode
[  355.428922][T15278] veth5: entered allmulticast mode
[  355.434610][T15278] bridge3: entered allmulticast mode
[  355.444473][T15278] mac80211_hwsim hwsim22 wlan4: entered allmulticast mode
[  355.452429][T15278] sit2: entered allmulticast mode
[  355.459111][T15278] bridge4: entered allmulticast mode
[  355.466709][T15278] veth6: entered allmulticast mode
[  355.472319][T15278] veth7: entered allmulticast mode
[  355.478531][T15278] bond4: entered allmulticast mode
[  355.483999][T15278] gre1: left promiscuous mode
[  355.511050][T15278] ip6tnl1: entered allmulticast mode
[  355.518267][T15278] mac80211_hwsim hwsim27 wlan5: entered allmulticast mode
[  355.526104][T15278] sit3: entered allmulticast mode
[  355.550164][T15278] xfrm1: left promiscuous mode
[  355.555279][T15278] vti2: entered allmulticast mode
[  355.561293][T15278] veth8: entered allmulticast mode
[  355.569407][T15278] veth9: entered allmulticast mode
[  355.575618][T15278] bridge5: entered allmulticast mode
[  355.583782][T15278] bond5: entered allmulticast mode
[  355.589637][T15278] gretap3: entered allmulticast mode
[  355.600294][T15279] kthread_run failed with err -4
[  355.640644][ T9514] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.666659][ T9514] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.675741][ T9514] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.685494][ T9514] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.702576][ T9514] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.738701][ T9514] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.762532][ T9514] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.773674][ T9514] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.209942][T15323] : renamed from hsr0
[  356.251915][T15323] netlink: 'syz.3.2684': attribute type 62 has an invalid length.
[  356.325256][T15328] __nla_validate_parse: 11 callbacks suppressed
[  356.325278][T15328] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2686'.
[  356.383412][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'.
[  356.495070][T15332] bond6: Removing last arp target with arp_interval on
[  356.503804][T15328] syzkaller1: entered promiscuous mode
[  356.518256][T15328] syzkaller1: entered allmulticast mode
[  356.724261][T15343] netlink: 'syz.3.2689': attribute type 1 has an invalid length.
[  356.793988][T15343] 8021q: adding VLAN 0 to HW filter on device bond10
[  356.857030][T15344] 8021q: adding VLAN 0 to HW filter on device bond10
[  356.883836][T15344] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  356.899587][T15344] bond10: (slave vcan1): Error -95 calling set_mac_address
[  356.971780][T15349] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  357.013334][T15349] bond10: (slave vcan1): Error -95 calling set_mac_address
[  357.302077][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'.
[  357.331747][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'.
[  357.533943][T15377] ipvlan1: left allmulticast mode
[  357.557353][T15377] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2699'.
[  357.915297][T15391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'.
[  358.003806][T15391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'.
[  358.046560][T15391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'.
[  358.071784][T15391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'.
[  358.108575][T15391] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2703'.
[  358.263802][T15411] netlink: 'syz.3.2708': attribute type 1 has an invalid length.
[  358.728525][T15429] ip6gre0: entered promiscuous mode
[  358.748293][T15429] ip6gre0: left allmulticast mode
[  359.230415][T15449] netlink: 'syz.4.2718': attribute type 1 has an invalid length.
[  359.263439][T15449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.382554][T15453] C: renamed from lo (while UP)
[  359.416977][T15453] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  359.873816][T15478] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  359.978980][T15478] bond1: (slave lo): Enslaving as an active interface with an up link
[  359.997405][T15478] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  360.105836][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  360.114339][    C1] lec:lec_tx_timeout: lec0
[  360.119383][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  360.885087][T15523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.922888][T15526] netlink: 'syz.1.2739': attribute type 83 has an invalid length.
[  361.618199][T15555] __nla_validate_parse: 73 callbacks suppressed
[  361.618253][T15555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2746'.
[  361.768975][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.787595][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.799769][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.808567][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.817971][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.910191][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.923370][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.933421][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.944946][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.954687][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.151841][T15573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  362.290158][T15556] C speed is unknown, defaulting to 1000
[  363.056812][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  363.205034][T15615] syzkaller0: entered promiscuous mode
[  363.215094][T15615] syzkaller0: entered allmulticast mode
[  363.297429][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'.
[  363.935618][T15556] chnl_net:caif_netlink_parms(): no params data found
[  364.045958][ T5825] Bluetooth: hci5: command tx timeout
[  364.230147][T15556] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.237940][T15556] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.245440][T15556] bridge_slave_0: entered allmulticast mode
[  364.254838][T15556] bridge_slave_0: entered promiscuous mode
[  364.264437][T15556] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.272679][T15556] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.280917][T15556] bridge_slave_1: entered allmulticast mode
[  364.291542][T15556] bridge_slave_1: entered promiscuous mode
[  364.564895][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.632340][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.777998][T15659] netlink: 'syz.2.2779': attribute type 4 has an invalid length.
[  364.811441][T15659] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2779'.
[  364.858026][T15659] .`: renamed from bond0 (while UP)
[  364.883468][T15556] team0: Port device team_slave_0 added
[  364.923353][T15556] team0: Port device team_slave_1 added
[  364.958429][T15667] syzkaller1: tun_chr_ioctl cmd 1074025677
[  364.983581][T15667] syzkaller1: linktype set to 823
[  365.124182][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.125833][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  365.141079][    C1] lec:lec_tx_timeout: lec0
[  365.146121][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  365.163357][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.246936][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.300870][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.311272][T15676] netlink: 'syz.4.2783': attribute type 1 has an invalid length.
[  365.325417][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.354841][T15676] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2783'.
[  365.428836][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.804738][T15693] netlink: 'syz.0.2787': attribute type 1 has an invalid length.
[  365.864249][T15693] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2787'.
[  365.951220][T15556] hsr_slave_0: entered promiscuous mode
[  365.964131][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2789'.
[  365.988953][T15556] hsr_slave_1: entered promiscuous mode
[  366.021241][T15556] debugfs: 'hsr0' already exists in 'hsr'
[  366.044831][T15556] Cannot create hsr debugfs directory
[  366.126061][ T5825] Bluetooth: hci5: command 0x041b tx timeout
[  367.126461][T15742] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2797'.
[  367.322399][T15556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.334760][T15556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  367.511815][T15556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.523110][T15556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  367.558397][T15767] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  367.694561][T15556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.725691][T15556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  367.802751][T15785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2809'.
[  367.881267][T15556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.897430][T15556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  368.111719][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'.
[  368.206941][T15704] Bluetooth: hci5: command 0x041b tx timeout
[  368.246104][T15556] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  368.261421][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  368.270134][T15556] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  368.291523][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  368.300560][T15556] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  368.316885][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  368.325124][T15556] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  368.338070][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  368.483956][T15825] netlink: 'syz.0.2819': attribute type 1 has an invalid length.
[  368.523767][T15825] bond14: entered promiscuous mode
[  368.557554][T15825] 8021q: adding VLAN 0 to HW filter on device bond14
[  368.640924][T15825] syzkaller0: entered promiscuous mode
[  368.647568][T15825] syzkaller0: entered allmulticast mode
[  368.654660][T15831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.798937][T15556] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.867141][T15556] 8021q: adding VLAN 0 to HW filter on device team0
[  368.908393][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.917244][ T9514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.953403][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.960879][ T9507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.079244][T15843] netlink: 'syz.0.2824': attribute type 24 has an invalid length.
[  369.194358][T15856] netlink: 'syz.1.2827': attribute type 10 has an invalid length.
[  369.211518][T15851] syzkaller1: entered promiscuous mode
[  369.224228][T15851] syzkaller1: entered allmulticast mode
[  370.293359][T15704] Bluetooth: hci5: command 0x041b tx timeout
[  370.928576][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  370.937005][    C1] lec:lec_tx_timeout: lec0
[  370.942754][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  371.599429][T15851] netdevsim netdevsim2 
: renamed from netdevsim0
[  371.893901][T15868] nftables ruleset with unbound set
[  372.365967][T15704] Bluetooth: hci5: command 0x041b tx timeout
[  372.383773][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.403193][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'.
[  372.609337][T15556] veth0_vlan: entered promiscuous mode
[  372.661766][T15556] veth1_vlan: entered promiscuous mode
[  372.925024][T15556] veth0_macvtap: entered promiscuous mode
[  373.019985][T15556] veth1_macvtap: entered promiscuous mode
[  373.123081][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.144856][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.225090][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.250687][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.279080][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.300862][T15938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2844'.
[  373.312751][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.602052][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.638614][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.761920][ T9508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.770771][ T9508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.872625][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2848'.
[  373.989068][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2848'.
[  374.011623][T15956] IPv6: NLM_F_CREATE should be specified when creating new route
[  374.145728][T15963] netlink: 'syz.4.2850': attribute type 21 has an invalid length.
[  374.154425][T15963] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2850'.
[  375.976117][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  375.984390][    C1] lec:lec_tx_timeout: lec0
[  375.989409][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  376.678274][T15963] netlink: 'syz.4.2850': attribute type 4 has an invalid length.
[  376.688418][T15963] netlink: 'syz.4.2850': attribute type 5 has an invalid length.
[  376.696675][T15963] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2850'.
[  377.063977][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'.
[  377.104955][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'.
[  377.546272][T16014] netlink: zone id is out of range
[  377.564385][T16014] netlink: zone id is out of range
[  377.575538][T16002] bond7 (unregistering): Released all slaves
[  377.582420][T16014] netlink: zone id is out of range
[  377.588594][T16014] netlink: zone id is out of range
[  377.606144][T16014] netlink: zone id is out of range
[  377.623799][T16014] netlink: zone id is out of range
[  377.647809][T16014] netlink: zone id is out of range
[  377.657200][T16014] netlink: zone id is out of range
[  377.675305][T16014] netlink: zone id is out of range
[  377.681074][T16014] netlink: zone id is out of range
[  377.770119][T16022] netlink: 'syz.0.2862': attribute type 1 has an invalid length.
[  378.196620][T16041] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  378.226814][T16041] bond1 (unregistering): Released all slaves
[  378.477349][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'.
[  378.548504][T16057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.659566][T16058] tipc: Disabling bearer <eth:syzkaller0>
[  379.353316][T16097] netlink: 'syz.1.2884': attribute type 1 has an invalid length.
[  379.388443][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.411622][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.424337][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.433983][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.444991][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.542129][T16103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'.
[  379.700481][T16097] 8021q: adding VLAN 0 to HW filter on device bond7
[  379.732916][T16103] bond7: (slave geneve2): making interface the new active one
[  379.743597][T16103] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  379.763195][ T9512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.784772][ T9512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.794483][T16106] netlink: 'syz.3.2886': attribute type 1 has an invalid length.
[  379.821372][ T9512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.832584][ T9512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.861404][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'.
[  379.877278][T16095] C speed is unknown, defaulting to 1000
[  379.881986][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'.
[  379.910919][T16106] 8021q: VLANs not supported on wg1
[  380.183053][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'.
[  380.252913][ T9512] netdevsim netdevsim2 
: set [0, 0] type 1 family 0 port 8472 - 0
[  380.282701][ T9512] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.341416][ T9512] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.367995][ T9512] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.402495][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2892'.
[  380.969359][T16156] netlink: 211344 bytes leftover after parsing attributes in process `syz.0.2899'.
[  380.978812][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  380.978886][    C1] lec:lec_tx_timeout: lec0
[  380.988868][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  381.116641][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'.
[  381.159027][T16163] netlink: 'syz.2.2901': attribute type 1 has an invalid length.
[  381.263219][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'.
[  381.304318][T16095] chnl_net:caif_netlink_parms(): no params data found
[  381.566016][   T50] Bluetooth: hci2: command tx timeout
[  381.614371][T16191] tap0: tun_chr_ioctl cmd 1074025678
[  381.632896][T16191] tap0: group set to 0
[  381.640726][T16095] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.654987][T16095] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.664219][T16095] bridge_slave_0: entered allmulticast mode
[  381.672978][T16095] bridge_slave_0: entered promiscuous mode
[  381.746972][T16095] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.792057][T16095] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.815726][T16095] bridge_slave_1: entered allmulticast mode
[  381.816963][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2912'.
[  381.829963][T16095] bridge_slave_1: entered promiscuous mode
[  381.971013][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.029078][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.169716][T16095] team0: Port device team_slave_0 added
[  382.197293][T16095] team0: Port device team_slave_1 added
[  382.260797][T16223] x_tables: duplicate underflow at hook 2
[  382.267649][T16228] x_tables: duplicate underflow at hook 2
[  382.274033][T16231] netlink: 'syz.1.2919': attribute type 1 has an invalid length.
[  382.376856][T16227] syzkaller0: entered promiscuous mode
[  382.394267][T16227] syzkaller0: entered allmulticast mode
[  382.409634][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.438494][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.528226][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.584414][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.600908][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.656676][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.865115][T16095] hsr_slave_0: entered promiscuous mode
[  382.895549][T16095] hsr_slave_1: entered promiscuous mode
[  382.912245][T16095] debugfs: 'hsr0' already exists in 'hsr'
[  382.942441][T16095] Cannot create hsr debugfs directory
[  382.984148][T16259] net_ratelimit: 46 callbacks suppressed
[  382.984168][T16259] netlink: Unknown conntrack attr (0)
[  383.589295][T16095] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.615093][T16095] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  383.645974][   T50] Bluetooth: hci2: command tx timeout
[  383.669820][T16291] veth1_vlan: left allmulticast mode
[  383.792725][T16297] netlink: 'syz.1.2934': attribute type 1 has an invalid length.
[  383.833826][T16095] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.865972][T16095] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  383.952522][T16303] IPv6: sit4: Disabled Multicast RS
[  383.978781][T16296] delete_channel: no stack
[  384.024361][T16095] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.052556][T16095] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  384.184239][T16312] netlink: 'syz.3.2939': attribute type 1 has an invalid length.
[  384.212158][T16312] netlink: 'syz.3.2939': attribute type 2 has an invalid length.
[  384.236409][T16312] netlink: 'syz.3.2939': attribute type 1 has an invalid length.
[  384.248794][T16315] vlan1: entered allmulticast mode
[  384.254639][T16312] __nla_validate_parse: 4 callbacks suppressed
[  384.254661][T16312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2939'.
[  384.333898][T16095] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.357339][T16322] sctp: [Deprecated]: syz.1.2941 (pid 16322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  384.357339][T16322] Use struct sctp_sack_info instead
[  384.376786][T16095] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  384.431706][T16327] netlink: 'syz.3.2943': attribute type 1 has an invalid length.
[  384.451160][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'.
[  384.546117][T16327] 8021q: adding VLAN 0 to HW filter on device bond2
[  384.568367][T16327] bond1: (slave bond2): making interface the new active one
[  384.578421][T16327] bond1: (slave bond2): Enslaving as an active interface with an up link
[  384.616852][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'.
[  384.720917][T16332] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  384.750172][T16327] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.972412][T16351] netlink: 'syz.3.2949': attribute type 1 has an invalid length.
[  385.024549][T16351] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2949'.
[  385.092851][T16095] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  385.184428][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.201911][T16095] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  385.225166][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'.
[  385.248807][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.268289][T16095] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  385.284393][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.313216][T16095] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  385.363419][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.554287][T16388] veth0: entered promiscuous mode
[  385.708101][T16386] veth0: left promiscuous mode
[  385.736550][   T50] Bluetooth: hci2: command tx timeout
[  385.787635][T16095] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.805295][T16401] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2958'.
[  385.838276][T16095] 8021q: adding VLAN 0 to HW filter on device team0
[  385.861878][ T9511] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.869187][ T9511] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.931084][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.938498][ T9512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.995804][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  386.003971][    C1] lec:lec_tx_timeout: lec0
[  386.009236][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  386.513490][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2967'.
[  386.549125][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2967'.
[  386.593924][T16433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2967'.
[  386.624230][T16433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2967'.
[  386.701161][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.742354][T16437] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  387.004420][T16446] vlan0: entered allmulticast mode
[  387.035457][T16446] bridge_slave_0: entered allmulticast mode
[  387.168136][T16454] bridge1: entered promiscuous mode
[  387.188728][T16454] bridge1: entered allmulticast mode
[  387.553037][T16477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  387.773673][T16095] veth0_vlan: entered promiscuous mode
[  387.806137][   T50] Bluetooth: hci2: command tx timeout
[  387.851443][T16095] veth1_vlan: entered promiscuous mode
[  387.911580][T16095] veth0_macvtap: entered promiscuous mode
[  387.922340][   T29] audit: type=1800 audit(1776297076.494:5): pid=16489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2983" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3131 res=0 errno=0
[  387.953672][T16095] veth1_macvtap: entered promiscuous mode
[  387.994350][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.038261][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.093944][ T1138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.122409][ T1138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.142267][ T1138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.165204][ T1138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.429799][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.441275][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.521964][T16511] xt_ecn: cannot match TCP bits for non-tcp packets
[  388.574321][ T9512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.603254][ T9512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.381067][T16548] ipt_REJECT: TCP_RESET invalid for non-tcp
[  389.428510][T15704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  389.442675][T15704] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  389.453594][T15704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  389.473768][T15704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  389.482259][T15704] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  389.954822][ T5821] syz_tun (unregistering): left promiscuous mode
[  390.071206][T16575] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  390.213643][T16586] netlink: 'syz.4.3007': attribute type 1 has an invalid length.
[  390.318434][T16552] C speed is unknown, defaulting to 1000
[  390.469081][T16595] netlink: 'syz.3.3009': attribute type 1 has an invalid length.
[  390.513966][T16596] __nla_validate_parse: 5 callbacks suppressed
[  390.513987][T16596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3010'.
[  390.555866][T16596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3010'.
[  390.804212][T16608] openvswitch: netlink: IP tunnel dst address not specified
[  390.830641][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3014'.
[  390.856609][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3014'.
[  390.897508][T16607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  390.991934][T16607] sit0: entered promiscuous mode
[  391.001170][T16607] sit0: left allmulticast mode
[  391.010611][T16607] netlink: 'syz.1.3014': attribute type 1 has an invalid length.
[  391.022016][T16607] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3014'.
[  391.025986][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  391.039551][    C1] lec:lec_tx_timeout: lec0
[  391.044543][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  391.305147][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'.
[  391.576817][   T50] Bluetooth: hci3: command tx timeout
[  391.695719][T16552] chnl_net:caif_netlink_parms(): no params data found
[  391.711741][T16639] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  391.785467][T16645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.893394][T16652] netlink: 'syz.3.3025': attribute type 5 has an invalid length.
[  392.014373][   T29] audit: type=1800 audit(1776297080.584:6): pid=16660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3025" name="memory.events" dev="tmpfs" ino=230 res=0 errno=0
[  392.285472][T16552] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.316041][T16552] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.329222][T16552] bridge_slave_0: entered allmulticast mode
[  392.337938][T16552] bridge_slave_0: entered promiscuous mode
[  392.360392][T16552] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.390424][T16552] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.408489][T16552] bridge_slave_1: entered allmulticast mode
[  392.435604][T16552] bridge_slave_1: entered promiscuous mode
[  392.555356][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.585018][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.693552][T16552] team0: Port device team_slave_0 added
[  392.726098][T16552] team0: Port device team_slave_1 added
[  392.825232][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.832868][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.865082][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.898201][T16694] bridge9: entered promiscuous mode
[  392.904969][T16694] bridge9: entered allmulticast mode
[  392.917468][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.931188][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.974328][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.015059][T16698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3037'.
[  393.057133][T16698] bridge: RTM_NEWNEIGH with invalid ether address
[  393.074395][T16700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3037'.
[  393.089839][T16700] bridge: RTM_NEWNEIGH with invalid ether address
[  393.151959][T16711] netlink: 'syz.1.3041': attribute type 11 has an invalid length.
[  393.192093][T16711] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3041'.
[  393.225246][T16711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3041'.
[  393.656816][   T50] Bluetooth: hci3: command tx timeout
[  395.731142][   T50] Bluetooth: hci3: command tx timeout
[  396.065850][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  396.073975][    C1] lec:lec_tx_timeout: lec0
[  396.079043][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  396.696649][T16552] hsr_slave_0: entered promiscuous mode
[  396.703577][T16552] hsr_slave_1: entered promiscuous mode
[  396.710317][T16552] debugfs: 'hsr0' already exists in 'hsr'
[  396.721730][T16552] Cannot create hsr debugfs directory
[  396.909897][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'.
[  396.954907][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3050'.
[  397.056558][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'.
[  397.212919][T16766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3055'.
[  397.348676][T16552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.399101][T16552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  397.419710][T16552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.598702][T16552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.632976][T16552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  397.662056][T16552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.769075][T16552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.801087][T16552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  397.807299][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'.
[  397.820052][   T50] Bluetooth: hci3: command tx timeout
[  397.832056][T16552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.869539][T16795] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3060'.
[  397.880281][T16795] netlink: 'syz.4.3060': attribute type 5 has an invalid length.
[  398.628312][T16823] batadv_slave_0: Caught tx_queue_len zero misconfig
[  398.740426][T16830] netlink: 'syz.3.3067': attribute type 4 has an invalid length.
[  399.321159][T16827] mpoa:mpoad_close: (<unknown>) going down
[  399.349232][T16552] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  399.379980][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  399.405330][T16552] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  399.459573][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  399.504126][T16552] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  399.534677][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  399.554258][T16552] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  399.597412][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  399.646998][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3073'.
[  399.709084][T16859] veth1_to_bond: entered allmulticast mode
[  399.864413][ T5891] C speed is unknown, defaulting to 1000
[  399.873591][ T5891] syz2: Port: 1 Link DOWN
[  399.882292][ T9514] netdevsim netdevsim2 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.905323][ T9514] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.919970][T16857] veth1_to_bond: left allmulticast mode
[  399.985996][ T5891] C speed is unknown, defaulting to 1000
[  399.993584][ T9514] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.018391][ T9514] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.041316][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'.
[  400.074209][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'.
[  400.117881][T16876] vlan2: entered promiscuous mode
[  400.125504][T16876] bridge0: entered promiscuous mode
[  400.172455][T16881] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3076'.
[  400.420868][T16901] tipc: New replicast peer: 172.20.20.187
[  400.444736][T16901] tipc: Enabled bearer <udp:syz2>, priority 10
[  400.526829][T16552] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.578609][T16552] 8021q: adding VLAN 0 to HW filter on device team0
[  400.623598][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.630868][ T9506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.672528][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.679784][ T9506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.022437][T16928] netlink: 'syz.1.3086': attribute type 1 has an invalid length.
[  401.025056][T16922] netlink: 'syz.1.3086': attribute type 1 has an invalid length.
[  401.718679][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.797475][T16953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.931378][T16552] veth0_vlan: entered promiscuous mode
[  401.940347][T16957] __nla_validate_parse: 1 callbacks suppressed
[  401.940371][T16957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3095'.
[  401.973816][T16552] veth1_vlan: entered promiscuous mode
[  402.049606][T16552] veth0_macvtap: entered promiscuous mode
[  402.087922][T16552] veth1_macvtap: entered promiscuous mode
[  402.138515][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.172917][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.225048][ T6567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.247363][ T6567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.295719][ T6567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.332489][ T6567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.690157][T16976] netlink: 'syz.2.3101': attribute type 1 has an invalid length.
[  402.715915][T16976] netlink: 'syz.2.3101': attribute type 3 has an invalid length.
[  402.736014][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.741332][T16976] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3101'.
[  402.753586][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.782491][T16976] NCSI netlink: No device for ifindex 813332851
[  402.797492][T16979] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3102'.
[  402.808364][T16979] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3102'.
[  402.983205][ T9508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.005323][ T9508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.354662][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'.
[  403.499859][T17013] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3111'.
[  403.621960][ T5891] IPVS: starting estimator thread 0...
[  403.632938][T17018] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  403.716406][T17019] IPVS: using max 25 ests per chain, 60000 per kthread
[  403.837542][T17033] netlink: 'syz.0.3117': attribute type 10 has an invalid length.
[  404.584423][T17056] gre1: entered promiscuous mode
[  404.604712][T17056] gre1: entered allmulticast mode
[  404.650913][T17061] sock: sock_set_timeout: `syz.0.3123' (pid 17061) tries to set negative timeout
[  404.672850][T15704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  404.690341][T15704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  404.703698][T15704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  404.717571][T15704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  404.731909][T15704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  405.172735][T17060] C speed is unknown, defaulting to 1000
[  405.712503][T17102] syzkaller0: entered promiscuous mode
[  405.746861][T17102] syzkaller0: entered allmulticast mode
[  405.788512][T17107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3137'.
[  405.897003][T17103] bridge3: entered promiscuous mode
[  405.946794][T17103] bridge3: entered allmulticast mode
[  406.008093][T17103] team0: Port device bridge3 added
[  406.379844][T17118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3139'.
[  406.716176][T17125] can: request_module (can-proto-0) failed.
[  406.745423][T17119] delete_channel: no stack
[  406.767439][T15704] Bluetooth: hci0: command tx timeout
[  407.065418][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3145'.
[  407.077939][T17060] chnl_net:caif_netlink_parms(): no params data found
[  407.908809][T17060] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.257945][T17060] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.291013][T17060] bridge_slave_0: entered allmulticast mode
[  408.335317][T17060] bridge_slave_0: entered promiscuous mode
[  408.365221][T17152] syzkaller1: entered promiscuous mode
[  408.382075][T17152] syzkaller1: entered allmulticast mode
[  408.500886][T17060] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.523260][T17060] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.554019][T17060] bridge_slave_1: entered allmulticast mode
[  408.584251][T17060] bridge_slave_1: entered promiscuous mode
[  408.722092][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.740011][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.846205][T15704] Bluetooth: hci0: command tx timeout
[  408.982167][T17060] team0: Port device team_slave_0 added
[  409.015512][T17060] team0: Port device team_slave_1 added
[  409.107424][T17208] openvswitch: netlink: IPv4 tun info is not correct
[  409.164818][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.199316][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.261439][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.332422][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.372940][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.430591][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.647368][T17222] xt_ecn: cannot match TCP bits for non-tcp packets
[  409.658448][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'.
[  409.688312][T17222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3164'.
[  409.714183][T17060] hsr_slave_0: entered promiscuous mode
[  409.730530][T17060] hsr_slave_1: entered promiscuous mode
[  409.747934][T17060] debugfs: 'hsr0' already exists in 'hsr'
[  409.757079][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'.
[  409.759459][T17060] Cannot create hsr debugfs directory
[  409.775186][T17235] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3168'.
[  409.788452][T17235] openvswitch: netlink: Message has 5 unknown bytes.
[  410.188102][T17254] openvswitch: netlink: Tunnel attr 162 out of range max 16
[  410.634948][T17279] x_tables: duplicate underflow at hook 4
[  410.928773][T15704] Bluetooth: hci0: command tx timeout
[  411.012124][T17283] syzkaller1: entered promiscuous mode
[  411.026960][T17283] syzkaller1: entered allmulticast mode
[  411.057701][T17299] netlink: 'syz.4.3183': attribute type 1 has an invalid length.
[  412.393791][T17060] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  412.426739][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  412.474575][T17060] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  412.581930][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  412.642280][T17060] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  412.820131][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  412.880856][T17060] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  412.972647][T17060] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  412.995110][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3203'.
[  413.011606][T15704] Bluetooth: hci0: command tx timeout
[  413.053866][T17399] netlink: 'syz.0.3204': attribute type 1 has an invalid length.
[  413.069162][T17399] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3204'.
[  413.085648][T17407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3203'.
[  413.115112][T17399] netlink: 'syz.0.3204': attribute type 16 has an invalid length.
[  413.142950][T17399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3204'.
[  413.314918][T17415] netlink: 'syz.1.3207': attribute type 1 has an invalid length.
[  413.419975][T17415] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  413.506608][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3208'.
[  413.602978][T17060] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.689011][T17432] netlink: 'syz.4.3210': attribute type 1 has an invalid length.
[  413.792997][T17429] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  413.813487][T17429] bond10 (unregistering): Released all slaves
[  413.855658][T17432] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  413.891344][T17060] 8021q: adding VLAN 0 to HW filter on device team0
[  413.947528][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.954800][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.991221][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.998491][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.178183][T17456] netlink: 'syz.0.3216': attribute type 29 has an invalid length.
[  414.204936][T17456] netlink: 'syz.0.3216': attribute type 29 has an invalid length.
[  414.228332][T17456] netlink: 'syz.0.3216': attribute type 29 has an invalid length.
[  414.247063][T17456] netlink: 'syz.0.3216': attribute type 29 has an invalid length.
[  414.262528][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'.
[  414.277069][T17456] netlink: 'syz.0.3216': attribute type 29 has an invalid length.
[  414.293685][T17463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3217'.
[  414.323206][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'.
[  414.346189][T17463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3217'.
[  414.653607][T17485] IPv6: NLM_F_CREATE should be specified when creating new route
[  414.759578][ T6567] veth0_to_team: left allmulticast mode
[  415.536774][ T6567] bond6 (unregistering): (slave geneve2): Releasing active interface
[  415.772069][ T6567] bond8 (unregistering): (slave bridge4): Releasing backup interface
[  415.819832][ T6567] team0: Port device bridge5 removed
[  415.968519][ T6567] bond0 (unregistering): Released all slaves
[  415.981511][ T6567] bond1 (unregistering): (slave lo): Releasing backup interface
[  415.989987][ T6567] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  416.009559][ T6567] bond1 (unregistering): Released all slaves
[  416.025421][ T6567] bond2 (unregistering): Released all slaves
[  416.042098][ T6567] bond3 (unregistering): Released all slaves
[  416.062004][ T6567] bond4 (unregistering): Released all slaves
[  416.081623][ T6567] bond5 (unregistering): Released all slaves
[  416.101762][ T6567] bond6 (unregistering): Released all slaves
[  416.119583][ T6567] bond7 (unregistering): Released all slaves
[  416.139899][ T6567] bond8 (unregistering): Released all slaves
[  416.549550][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.587639][ T6567] tipc: Disabling bearer <eth:caif0>
[  416.674444][ T6567] tipc: Left network mode
[  416.711663][T17541] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3229'.
[  416.954126][T17553] tipc: Started in network mode
[  416.987064][T17553] tipc: Node identity ac14140f, cluster identity 4711
[  417.024600][T17553] tipc: New replicast peer: 255.255.255.255
[  417.041529][T17553] tipc: Enabled bearer <udp:syz2>, priority 10
[  417.112253][T17060] veth0_vlan: entered promiscuous mode
[  417.188018][T17060] veth1_vlan: entered promiscuous mode
[  417.209582][T17554] validate_nla: 4 callbacks suppressed
[  417.209604][T17554] netlink: 'syz.0.3232': attribute type 1 has an invalid length.
[  417.378691][ T9514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.401706][ T9514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.016423][ T9514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.044175][ T9514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.113321][T17583] netlink: 'syz.4.3242': attribute type 3 has an invalid length.
[  418.230141][ T6204] tipc: Node number set to 2886997007
[  418.391246][T17060] veth0_macvtap: entered promiscuous mode
[  418.465713][T17060] veth1_macvtap: entered promiscuous mode
[  418.471634][T17573] netlink: 'syz.3.3239': attribute type 5 has an invalid length.
[  418.562670][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.690995][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.779512][ T9506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.808889][ T9506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.839226][ T9506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.942326][ T9506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.958231][T17596] __nla_validate_parse: 4 callbacks suppressed
[  418.958250][T17596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3246'.
[  419.076742][T17600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.129795][T17600] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.152688][T17600] netlink: 'syz.3.3247': attribute type 6 has an invalid length.
[  419.196889][T17600] netlink: 'syz.3.3247': attribute type 5 has an invalid length.
[  419.263763][T17600] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.299216][T17599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.310860][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.331568][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.363604][T17599] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.416847][T17599] netlink: 'syz.3.3247': attribute type 6 has an invalid length.
[  419.430238][T17599] netlink: 'syz.3.3247': attribute type 5 has an invalid length.
[  419.447935][T17599] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3247'.
[  419.689166][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.714724][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.001438][T17635] netlink: 'syz.2.3120': attribute type 4 has an invalid length.
[  420.609707][ T6567] hsr_slave_0: left promiscuous mode
[  420.637761][ T6567] hsr_slave_1: left promiscuous mode
[  420.742400][ T6567] veth0_macvtap: left promiscuous mode
[  420.772987][ T6567] veth1_vlan: left promiscuous mode
[  420.796970][ T6567] veth0_vlan: left promiscuous mode
[  421.058953][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  421.074862][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  421.087855][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  421.102965][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  421.112465][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  421.330922][T17680] netlink: 'syz.4.3268': attribute type 2 has an invalid length.
[  421.341838][ T6567] team0 (unregistering): Port device batadv2 removed
[  421.366444][ T6567] team0 (unregistering): Port device batadv1 removed
[  422.033712][T17671] C speed is unknown, defaulting to 1000
[  422.120365][T17701] sctp: [Deprecated]: syz.2.3274 (pid 17701) Use of int in maxseg socket option.
[  422.120365][T17701] Use struct sctp_assoc_value instead
[  422.557457][T17716] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  422.581604][T17717] netlink: 'syz.0.3280': attribute type 1 has an invalid length.
[  422.601747][T17716] netlink: 'syz.0.3280': attribute type 11 has an invalid length.
[  422.732114][T17719] tipc: Started in network mode
[  422.746288][T17719] tipc: Node identity 0624ab65a197, cluster identity 4711
[  422.786444][T17719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.841107][T17719] syzkaller0: mtu less than device minimum
[  422.862839][ T6567] IPVS: stop unused estimator thread 0...
[  422.876094][T17727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3283'.
[  422.896485][T17732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3283'.
[  422.912017][T17718] tipc: Disabling bearer <eth:syzkaller0>
[  423.047821][T17737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3286'.
[  423.165983][   T50] Bluetooth: hci1: command tx timeout
[  423.251352][T17671] chnl_net:caif_netlink_parms(): no params data found
[  423.422376][T17754] bond3: option packets_per_slave: invalid value (18446744073709551615)
[  423.433921][T17754] bond3: option packets_per_slave: allowed values 0 - 65535
[  423.446716][T17754] bond3 (unregistering): Released all slaves
[  423.624523][T17671] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.632482][T17671] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.640817][T17671] bridge_slave_0: entered allmulticast mode
[  423.658268][T17671] bridge_slave_0: entered promiscuous mode
[  423.668926][T17671] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.676569][T17671] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.687943][T17671] bridge_slave_1: entered allmulticast mode
[  423.696969][T17671] bridge_slave_1: entered promiscuous mode
[  423.745281][T17671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.763964][T17671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.800290][T17768] xt_policy: output policy not valid in PREROUTING and INPUT
[  423.834917][T17671] team0: Port device team_slave_0 added
[  423.872771][T17671] team0: Port device team_slave_1 added
[  423.960701][T17778] netlink: 'syz.0.3299': attribute type 1 has an invalid length.
[  423.983387][T17775] veth3: entered allmulticast mode
[  424.072657][T17671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.096912][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.132744][T17671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.182814][ T8323] ==================================================================
[  424.191176][ T8323] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550
[  424.199549][ T8323] Read of size 8 at addr ffff888077761ec0 by task dhcpcd/8323
[  424.207666][ T8323] 
[  424.210373][ T8323] CPU: 1 UID: 101 PID: 8323 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) 
[  424.210404][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  424.210427][ T8323] Call Trace:
[  424.210435][ T8323]  <TASK>
[  424.210444][ T8323]  dump_stack_lvl+0xe8/0x150
[  424.210478][ T8323]  print_report+0xba/0x230
[  424.210503][ T8323]  ? sock_def_readable+0x1cb/0x550
[  424.210526][ T8323]  kasan_report+0x117/0x150
[  424.210548][ T8323]  ? sock_def_readable+0x1cb/0x550
[  424.210576][ T8323]  sock_def_readable+0x1cb/0x550
[  424.210598][ T8323]  ? sock_def_readable+0xae/0x550
[  424.210633][ T8323]  ? send_to_lecd+0x26d/0x830
[  424.210658][ T8323]  send_to_lecd+0x3e7/0x830
[  424.210693][ T8323]  lec_start_xmit+0xe52/0x2890
[  424.210725][ T8323]  dev_hard_start_xmit+0x2cd/0x830
[  424.210754][ T8323]  sch_direct_xmit+0x251/0x4c0
[  424.210785][ T8323]  ? __pfx_sch_direct_xmit+0x10/0x10
[  424.210815][ T8323]  __qdisc_run+0xa83/0x1560
[  424.210860][ T8323]  __dev_queue_xmit+0x1021/0x3950
[  424.210886][ T8323]  ? __dev_queue_xmit+0x2b6/0x3950
[  424.210919][ T8323]  ? _copy_from_iter+0x5d4/0x1670
[  424.210951][ T8323]  ? __pfx___dev_queue_xmit+0x10/0x10
[  424.210977][ T8323]  ? __pfx__copy_from_iter+0x10/0x10
[  424.211016][ T8323]  ? __pfx_packet_parse_headers+0x10/0x10
[  424.211048][ T8323]  ? packet_xmit+0x68/0x320
[  424.211079][ T8323]  packet_sendmsg+0x3ebc/0x50f0
[  424.211108][ T8323]  ? shmem_acquire_dquot+0x80/0x640
[  424.211144][ T8323]  ? do_syscall_64+0x15f/0xf80
[  424.211169][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.211211][ T8323]  ? aa_sk_perm+0x6d5/0x900
[  424.211237][ T8323]  ? __pfx_packet_sendmsg+0x10/0x10
[  424.211266][ T8323]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  424.211300][ T8323]  ? aa_sock_msg_perm+0xf1/0x1b0
[  424.211329][ T8323]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.211362][ T8323]  ? __pfx_packet_sendmsg+0x10/0x10
[  424.211385][ T8323]  sock_write_iter+0x49b/0x4f0
[  424.211410][ T8323]  ? __pfx_sock_write_iter+0x10/0x10
[  424.211431][ T8323]  ? aa_file_perm+0x192/0x15e0
[  424.211467][ T8323]  ? aa_sock_msg_perm+0xda/0x1b0
[  424.211499][ T8323]  do_iter_readv_writev+0x619/0x8c0
[  424.211535][ T8323]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  424.211571][ T8323]  ? bpf_lsm_file_permission+0x9/0x20
[  424.211591][ T8323]  ? security_file_permission+0x75/0x260
[  424.211616][ T8323]  ? rw_verify_area+0x255/0x4d0
[  424.211647][ T8323]  vfs_writev+0x33c/0x990
[  424.211669][ T8323]  ? bpf_lsm_file_permission+0x9/0x20
[  424.211695][ T8323]  ? __pfx_vfs_writev+0x10/0x10
[  424.211728][ T8323]  ? __pfx_set_user_sigmask+0x10/0x10
[  424.211772][ T8323]  do_writev+0x154/0x2e0
[  424.211797][ T8323]  ? __pfx_do_writev+0x10/0x10
[  424.211831][ T8323]  ? __secure_computing+0xe1/0x2a0
[  424.211858][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.211879][ T8323]  do_syscall_64+0x15f/0xf80
[  424.211904][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.211926][ T8323]  ? clear_bhb_loop+0x40/0x90
[  424.211949][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.211981][ T8323] RIP: 0033:0x7f136efc1407
[  424.212001][ T8323] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  424.212021][ T8323] RSP: 002b:00007ffcd7d2c010 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[  424.212046][ T8323] RAX: ffffffffffffffda RBX: 00007f136ef37780 RCX: 00007f136efc1407
[  424.212063][ T8323] RDX: 0000000000000002 RSI: 00007ffcd7d2c070 RDI: 0000000000000003
[  424.212077][ T8323] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000
[  424.212090][ T8323] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcd7d2c0b0
[  424.212104][ T8323] R13: 000055c46509eb30 R14: 00007ffcd7d2c100 R15: 00007ffcd7d3c2d0
[  424.212131][ T8323]  </TASK>
[  424.212139][ T8323] 
[  424.598942][ T8323] Allocated by task 16095:
[  424.603389][ T8323]  kasan_save_track+0x3e/0x80
[  424.608138][ T8323]  __kasan_slab_alloc+0x6c/0x80
[  424.613321][ T8323]  kmem_cache_alloc_lru_noprof+0x2b8/0x640
[  424.619533][ T8323]  sock_alloc_inode+0x2c/0x190
[  424.624403][ T8323]  alloc_inode+0x6a/0x1b0
[  424.628774][ T8323]  __sock_create+0x12d/0x9d0
[  424.633765][ T8323]  __sys_socket+0xd6/0x1b0
[  424.638611][ T8323]  __x64_sys_socket+0x7a/0x90
[  424.643455][ T8323]  do_syscall_64+0x15f/0xf80
[  424.648220][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.654419][ T8323] 
[  424.656776][ T8323] Freed by task 5810:
[  424.660896][ T8323]  kasan_save_track+0x3e/0x80
[  424.665691][ T8323]  kasan_save_free_info+0x46/0x50
[  424.670768][ T8323]  __kasan_slab_free+0x5c/0x80
[  424.675572][ T8323]  kmem_cache_free+0x180/0x630
[  424.680367][ T8323]  rcu_core+0x7cd/0x1070
[  424.684652][ T8323]  handle_softirqs+0x22a/0x840
[  424.689520][ T8323]  __irq_exit_rcu+0xca/0x220
[  424.694262][ T8323]  irq_exit_rcu+0x9/0x30
[  424.698552][ T8323]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  424.704335][ T8323]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  424.710624][ T8323] 
[  424.712978][ T8323] Last potentially related work creation:
[  424.718712][ T8323]  kasan_save_stack+0x3e/0x60
[  424.723559][ T8323]  kasan_record_aux_stack+0xbd/0xd0
[  424.728788][ T8323]  call_rcu+0xee/0x890
[  424.732907][ T8323]  evict+0x95b/0xb10
[  424.736864][ T8323]  __dentry_kill+0x1a2/0x5e0
[  424.742203][ T8323]  finish_dput+0xc9/0x480
[  424.747182][ T8323]  __fput+0x691/0xa60
[  424.751203][ T8323]  fput_close_sync+0x11f/0x240
[  424.756025][ T8323]  __x64_sys_close+0x7e/0x110
[  424.760749][ T8323]  do_syscall_64+0x15f/0xf80
[  424.765397][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.771413][ T8323] 
[  424.773762][ T8323] The buggy address belongs to the object at ffff888077761e00
[  424.773762][ T8323]  which belongs to the cache sock_inode_cache of size 1408
[  424.788929][ T8323] The buggy address is located 192 bytes inside of
[  424.788929][ T8323]  freed 1408-byte region [ffff888077761e00, ffff888077762380)
[  424.803298][ T8323] 
[  424.805659][ T8323] The buggy address belongs to the physical page:
[  424.812292][ T8323] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077763c00 pfn:0x77760
[  424.822804][ T8323] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  424.831422][ T8323] memcg:ffff888077767e01
[  424.835694][ T8323] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  424.844325][ T8323] page_type: f5(slab)
[  424.848606][ T8323] raw: 00fff00000000240 ffff888140af9c80 ffffea0001aabc10 ffffea00015dd610
[  424.857488][ T8323] raw: ffff888077763c00 0000000800150014 00000000f5000000 ffff888077767e01
[  424.866206][ T8323] head: 00fff00000000240 ffff888140af9c80 ffffea0001aabc10 ffffea00015dd610
[  424.875022][ T8323] head: ffff888077763c00 0000000800150014 00000000f5000000 ffff888077767e01
[  424.884052][ T8323] head: 00fff00000000003 ffffea0001ddd801 00000000ffffffff 00000000ffffffff
[  424.892763][ T8323] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  424.901640][ T8323] page dumped because: kasan: bad access detected
[  424.908291][ T8323] page_owner tracks the page as allocated
[  424.914039][ T8323] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 199394472513, free_ts 99551128035
[  424.937696][ T8323]  post_alloc_hook+0x231/0x280
[  424.942851][ T8323]  get_page_from_freelist+0x24dc/0x2580
[  424.948919][ T8323]  __alloc_frozen_pages_noprof+0x18d/0x380
[  424.954798][ T8323]  allocate_slab+0x77/0x660
[  424.959844][ T8323]  refill_objects+0x331/0x3c0
[  424.964883][ T8323]  __pcs_replace_empty_main+0x2e6/0x730
[  424.970654][ T8323]  kmem_cache_alloc_lru_noprof+0x37c/0x640
[  424.977015][ T8323]  sock_alloc_inode+0x2c/0x190
[  424.981922][ T8323]  alloc_inode+0x6a/0x1b0
[  424.986510][ T8323]  __sock_create+0x12d/0x9d0
[  424.991380][ T8323]  __sys_socket+0xd6/0x1b0
[  424.995868][ T8323]  __x64_sys_socket+0x7a/0x90
[  425.000819][ T8323]  do_syscall_64+0x15f/0xf80
[  425.005637][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.011709][ T8323] page last free pid 5957 tgid 5957 stack trace:
[  425.018186][ T8323]  __free_frozen_pages+0xc2b/0xdb0
[  425.023402][ T8323]  __slab_free+0x263/0x2b0
[  425.027955][ T8323]  qlist_free_all+0x97/0x100
[  425.032682][ T8323]  kasan_quarantine_reduce+0x148/0x160
[  425.038418][ T8323]  __kasan_slab_alloc+0x22/0x80
[  425.043674][ T8323]  __kmalloc_noprof+0x316/0x760
[  425.048684][ T8323]  security_inode_init_security+0x102/0x3d0
[  425.054709][ T8323]  shmem_mknod+0x1fe/0x360
[  425.059525][ T8323]  path_openat+0x1395/0x3860
[  425.064443][ T8323]  do_file_open+0x23e/0x4a0
[  425.069100][ T8323]  do_sys_openat2+0x113/0x200
[  425.074232][ T8323]  __x64_sys_openat+0x138/0x170
[  425.079332][ T8323]  do_syscall_64+0x15f/0xf80
[  425.084123][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.093722][ T8323] 
[  425.096327][ T8323] Memory state around the buggy address:
[  425.102278][ T8323]  ffff888077761d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  425.111011][ T8323]  ffff888077761e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.120010][ T8323] >ffff888077761e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.128205][ T8323]                                            ^
[  425.134748][ T8323]  ffff888077761f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.143158][ T8323]  ffff888077761f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.151442][ T8323] ==================================================================
[  425.159818][ T8323] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  425.167048][ T8323] CPU: 1 UID: 101 PID: 8323 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) 
[  425.176713][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  425.187005][ T8323] Call Trace:
[  425.190330][ T8323]  <TASK>
[  425.193293][ T8323]  vpanic+0x56c/0xa60
[  425.197504][ T8323]  ? __pfx_vpanic+0x10/0x10
[  425.202224][ T8323]  panic+0xc5/0xd0
[  425.206247][ T8323]  ? __pfx_panic+0x10/0x10
[  425.210713][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.215855][ T8323]  ? rcu_is_watching+0x15/0xb0
[  425.220669][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.225821][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.230975][ T8323]  check_panic_on_warn+0x89/0xb0
[  425.236105][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.241543][ T8323]  end_report+0x73/0x170
[  425.245854][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.251124][ T8323]  kasan_report+0x128/0x150
[  425.255712][ T8323]  ? sock_def_readable+0x1cb/0x550
[  425.260947][ T8323]  sock_def_readable+0x1cb/0x550
[  425.266044][ T8323]  ? sock_def_readable+0xae/0x550
[  425.271339][ T8323]  ? send_to_lecd+0x26d/0x830
[  425.276064][ T8323]  send_to_lecd+0x3e7/0x830
[  425.280677][ T8323]  lec_start_xmit+0xe52/0x2890
[  425.285505][ T8323]  dev_hard_start_xmit+0x2cd/0x830
[  425.290686][ T8323]  sch_direct_xmit+0x251/0x4c0
[  425.295690][ T8323]  ? __pfx_sch_direct_xmit+0x10/0x10
[  425.301160][ T8323]  __qdisc_run+0xa83/0x1560
[  425.305814][ T8323]  __dev_queue_xmit+0x1021/0x3950
[  425.310880][ T8323]  ? __dev_queue_xmit+0x2b6/0x3950
[  425.316034][ T8323]  ? _copy_from_iter+0x5d4/0x1670
[  425.321163][ T8323]  ? __pfx___dev_queue_xmit+0x10/0x10
[  425.326768][ T8323]  ? __pfx__copy_from_iter+0x10/0x10
[  425.332378][ T8323]  ? __pfx_packet_parse_headers+0x10/0x10
[  425.338259][ T8323]  ? packet_xmit+0x68/0x320
[  425.343121][ T8323]  packet_sendmsg+0x3ebc/0x50f0
[  425.348065][ T8323]  ? shmem_acquire_dquot+0x80/0x640
[  425.353809][ T8323]  ? do_syscall_64+0x15f/0xf80
[  425.358648][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.364877][ T8323]  ? aa_sk_perm+0x6d5/0x900
[  425.369527][ T8323]  ? __pfx_packet_sendmsg+0x10/0x10
[  425.375061][ T8323]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  425.381629][ T8323]  ? aa_sock_msg_perm+0xf1/0x1b0
[  425.386660][ T8323]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.392120][ T8323]  ? __pfx_packet_sendmsg+0x10/0x10
[  425.397545][ T8323]  sock_write_iter+0x49b/0x4f0
[  425.402531][ T8323]  ? __pfx_sock_write_iter+0x10/0x10
[  425.407950][ T8323]  ? aa_file_perm+0x192/0x15e0
[  425.412858][ T8323]  ? aa_sock_msg_perm+0xda/0x1b0
[  425.417970][ T8323]  do_iter_readv_writev+0x619/0x8c0
[  425.423652][ T8323]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  425.429434][ T8323]  ? bpf_lsm_file_permission+0x9/0x20
[  425.435031][ T8323]  ? security_file_permission+0x75/0x260
[  425.440786][ T8323]  ? rw_verify_area+0x255/0x4d0
[  425.445731][ T8323]  vfs_writev+0x33c/0x990
[  425.450232][ T8323]  ? bpf_lsm_file_permission+0x9/0x20
[  425.456005][ T8323]  ? __pfx_vfs_writev+0x10/0x10
[  425.461123][ T8323]  ? __pfx_set_user_sigmask+0x10/0x10
[  425.466599][ T8323]  do_writev+0x154/0x2e0
[  425.470916][ T8323]  ? __pfx_do_writev+0x10/0x10
[  425.476696][ T8323]  ? __secure_computing+0xe1/0x2a0
[  425.482142][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.488255][ T8323]  do_syscall_64+0x15f/0xf80
[  425.492993][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.499215][ T8323]  ? clear_bhb_loop+0x40/0x90
[  425.504281][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.510465][ T8323] RIP: 0033:0x7f136efc1407
[  425.515086][ T8323] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  425.535724][ T8323] RSP: 002b:00007ffcd7d2c010 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[  425.544569][ T8323] RAX: ffffffffffffffda RBX: 00007f136ef37780 RCX: 00007f136efc1407
[  425.552707][ T8323] RDX: 0000000000000002 RSI: 00007ffcd7d2c070 RDI: 0000000000000003
[  425.560805][ T8323] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000
[  425.569181][ T8323] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcd7d2c0b0
[  425.577197][ T8323] R13: 000055c46509eb30 R14: 00007ffcd7d2c100 R15: 00007ffcd7d3c2d0
[  425.585827][ T8323]  </TASK>
[  425.589487][ T8323] Kernel Offset: disabled
[  425.593832][ T8323] Rebooting in 86400 seconds..